5.9
Moyenne
CVE-2023-23775 Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89]…
Description
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.
Produits et versions touchés
Autres CVE de FortiSOAR
Les 15 CVE de FortiSOAR →
CVE-2024-48892
A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all…
6.4
Moyenne
CVE-2025-32932
An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in…
6.2
Moyenne
CVE-2024-21760
An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4…
7.7
Élevée
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne