5.1
Moyenne
CVE-2024-27785 An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may…
Description
An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAIOps | 2.0.0 | Pas de correctif indiqué |
Autres CVE de FortiAIOps
Les 4 CVE de FortiAIOps →
CVE-2024-27782
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an…
7.7
Élevée
CVE-2024-27783
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow…
7.2
Élevée
CVE-2024-27784
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet…
8.3
Élevée