Aller au contenu
en Se connecter
5.6 Moyenne

CVE-2025-49784 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigData 7.6.0, FortiAnalyzer-BigData 7.4.0 through 7.4.4, FortiAnalyzer-BigData 7.2 all versions, FortiAnalyzer-BigData 7.0 all versions, FortiAnalyzer-BigData 6.4 all versions, FortiAnalyzer-BigData 6.2 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiAnalyzer-BigData 7.6.0 Pas de correctif indiqué
FortiAnalyzer 7.6 7.6.0 → 7.6.3 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiAnalyzer-BigData

Les 5 CVE de FortiAnalyzer-BigData →
CVE-2025-61848 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 6.5 Moyenne CVE-2023-41842 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Moyenne CVE-2023-42782 A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below… 5.0 Moyenne CVE-2023-42787 A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and… 6.2 Moyenne
Suivre cette CVE