VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 18, 2022· Updated Jun 17, 2026

CVE-2022-26120

CVE-2022-26120

Description

Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Affected products

5
  • Fortinet/Fortiadc 200d3 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.0.0,<6.2.3
    • cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: 7.0.0-7.0.1, 5.0.0-6.2.2
  • Fortinet/Fortinetcpe-rescue
    Range: FortiADC 7.0.0 through 7.0.1, 5.0.0 through 6.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.