VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2024-52962

CVE-2024-52962

Description

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Fortinet/Fortianalyzer3 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.14
    • cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: <=7.6.1, <=7.4.5, <=7.2.8, <=7.0.13
  • Fortinet/Fortimanager3 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.14
    • cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: <=7.6.1, <=7.4.5, <=7.2.8, <=7.0.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.