VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 14, 2025· Updated Jan 14, 2025

CVE-2024-35275

CVE-2024-35275

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Fortinet/Fortianalyzerv52 versions
    cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0 - 7.4.2
  • Fortinet/Fortimanagerv52 versions
    cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0 - 7.4.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.