Beveiligingsadvies

CVE-2025-59922

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-13 16:32:28

Laatst bijgewerkt 2026-01-14 09:16:14

Toegewezen door fortinet

CVSS-score 6.8

Status PUBLISHED

Beschrijving

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

← Alle CVE's bekijken Bekijk op cve.org ↗