VYPR
← All advisories
High severity8.3NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2022-27488

CVE-2022-27488

Description

A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.

Affected products

18
  • Fortinet/Fortimailllm-fuzzy3 versions
    7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x+ 2 more
    • (no CPE)range: 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.12
    • (no CPE)range: 7.0.0
  • Fortinet/FortiVoiceEnterprisellm-fuzzy
    Range: 6.4.x, 6.0.x
  • Fortinet/FortiSwitch GUIllm-fuzzy3 versions
    7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x+ 2 more
    • (no CPE)range: 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x
    • (no CPE)range: 7.0.0
    • cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.7
  • Fortinet/FortiRecorderllm-fuzzy3 versions
    6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x+ 2 more
    • (no CPE)range: 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x
    • (no CPE)range: 6.4.0
    • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*range: >=2.6.0,<=2.6.3
  • Fortinet/Fortindrllm-fuzzy4 versions
    1.x.x+ 3 more
    • (no CPE)range: 1.x.x
    • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*range: >=7.0.0,<=7.0.4
    • cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.1.0
  • Fortinet/FortiAI2 versions
    cpe:2.3:a:fortinet:fortiai:1.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiai:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiai:1.5.3:*:*:*:*:*:*:*
  • Fortinet/Fortivoice2 versions
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.11
    • (no CPE)range: 6.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.