Unrated severityNVD Advisory· Published Apr 8, 2025· Updated Apr 8, 2025

CVE-2024-52962

Description

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests.

Affected products

Fortinet/Fortianalyzerv5
cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*
Range: 7.6.0
Fortinet/Fortimanagerv5
cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*
Range: 7.6.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

fortiguard.fortinet.com/psirt/FG-IR-24-453mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000