Threats tagged 'ghsa-fmmh-35cc-5vjx'

An SQL injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated attacker to execute unauthorized SQL commands via specially crafted requests. The vulnerability affects FortiAnalyzer versions 7.2 all versions through 8.0.1 and FortiManager versions 7.2.0 through 8.0.1, including cloud versions in similar ranges. The CVSS score is 7.1, indicating a high severity impact primarily on confidentiality. No public exploits or patches are currently documented.