Threats tagged 'ghsa-g9f5-9ghj-rgg6'

An OS command injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated privileged attacker to execute unauthorized commands by exploiting crafted report schedule names. The vulnerability affects versions from 7.2.0 up to certain later versions, with no explicit fixed versions provided. The CVSS score is 7.2, indicating a high severity risk.