An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.3, FortiAnalyzer-BigData 7.6.0 through 7.6.1, FortiAnalyzer-BigData 7.4.0 through 7.4.5, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a privileged authenticated attacker to execute unauthorized code or commands via JSON RPC API
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiManager
Vendor
Fortinet
Product
FortiManager
Platforms
Unknown
Default status
unaffected
FortiManager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
semver
Unavailable
7.6.3
None listed
FortiAnalyzer
Vendor
Fortinet
Product
FortiAnalyzer
Platforms
Unknown
Default status
unaffected
FortiAnalyzer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
semver
Unavailable
7.6.3
None listed
FortiAnalyzer-BigData
Vendor
Fortinet
Product
FortiAnalyzer-BigData
Platforms
Unknown
Default status
unaffected
FortiAnalyzer-BigData · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
semver
Unavailable
7.6.1
None listed
FortiManager Cloud
Vendor
Fortinet
Product
FortiManager Cloud
Platforms
Unknown
Default status
unaffected
FortiManager Cloud · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.2
affected
semver
Unavailable
7.6.4
None listed
FortiAnalyzer Cloud
Vendor
Fortinet
Product
FortiAnalyzer Cloud
Platforms
Unknown
Default status
unaffected
FortiAnalyzer Cloud · Scoped product and version facts