FortiExtender - multiple command injection vulnerabilities in webserver

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortiextender

webserver

command injection

0.001 Low

EPSS

Percentile

48.5%

JSON

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the webserver of FortiExtender may allow a privileged attacker to execute arbitrary OS commands via specially crafted input parameters.

CPENameOperatorVersion
fortiextendereq7.0.3
fortiextendereq7.0.2
fortiextendereq7.0.1
fortiextendereq7.0.0
fortiextendereq5.3.2
fortiextendereq4.2.4
fortiextendereq4.2.3
fortiextendereq4.2.2
fortiextendereq4.2.1
fortiextendereq4.2.0

Name	Operator	Version
fortiextender	eq	7.0.3
fortiextender	eq	7.0.2
fortiextender	eq	7.0.1
fortiextender	eq	7.0.0
fortiextender	eq	5.3.2
fortiextender	eq	4.2.4
fortiextender	eq	4.2.3
fortiextender	eq	4.2.2
fortiextender	eq	4.2.1
fortiextender	eq	4.2.0

Rows per page:

1-10 of 331

0.001 Low

EPSS

Percentile

48.5%

JSON

Related for FG-IR-22-048