Fortinet FortiADC SQL Injection Vulnerability (CNVD-2023-02484)

2022-12-0800:00:00

China National Vulnerability Database

www.cnvd.org.cn

fortinet fortiadc

application delivery controller

sql injection

special elements

unauthorized code

http requests

vulnerability

0.001 Low

EPSS

Percentile

37.2%

JSON

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC is vulnerable to SQL injection, which stems from the use of special elements that are not neutralized and can be exploited by an attacker to execute unauthorized code or send commands via specially crafted HTTP requests.

CPENameOperatorVersion
fortinet fortinet fortiadceq7.1.0
fortinet fortiadceq7.1.0
fortinet fortiadc >=5.2.0，le6.2.4
fortinet fortiadceq7.0.0
fortinet fortiadceq7.0.1
fortinet fortiadceq7.0.2

Name	Operator	Version
fortinet fortinet fortiadc	eq	7.1.0
fortinet fortiadc	eq	7.1.0
fortinet fortiadc >=5.2.0，	le	6.2.4
fortinet fortiadc	eq	7.0.0
fortinet fortiadc	eq	7.0.1
fortinet fortiadc	eq	7.0.2

0.001 Low

EPSS

Percentile

37.2%

JSON

Related for CNVD-2023-02484