8.3
High
CVE-2024-46662 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager…
Description
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiManager 7.4 | 7.4.1 → 7.4.3 | No fix stated |
Other CVEs of FortiManager
The 88 CVEs of FortiManager →
CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium
CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
5.9
Medium
CVE-2026-23705
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]…
6.5
Medium
CVE-2026-106171
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
5.3
Medium