CVE-2025-46773 in FortiAnalyzerinformación

Resumen

por MITRE • 2026-10-13

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Fortinet

Reservar

2025-04-29

Divulgación

2026-10-13

Moderación

aceptado

Artículo

VDB-417870

EPSS

0.00000

KEV

no

Actividades

bajo

Fuentes

Do you need the next level of professionalism?

Upgrade your account now!