VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026

CVE-2024-35275

CVE-2024-35275

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Fortinet/Fortianalyzer4 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=7.4.0,<7.4.4
    • cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*range: >=7.4.1,<7.4.3
    • cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0 - 7.4.2
  • Fortinet/Fortimanager3 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=7.4.0,<7.4.3
    • cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0 - 7.4.2
  • Fortinet/Fortimanager Cloud
    cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*
    Range: >=7.4.1,<7.4.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.