VYPR
← All advisories
Medium severity4.1NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026

CVE-2024-52969

CVE-2024-52969

Description

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, version 6.5.3 and below, version 6.4.4 and below Update/Create Case feature may allow an authenticated attacker to extract database information via crafted requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/FortiSIEM2 versions
    cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*range: >=6.4.0,<=7.1.7
    • (no CPE)range: 7.1.0
  • FortiSIEM/FortiSIEMllm-create
    Range: <=7.1.7, <=7.1.0, <=7.0.3, <=6.7.9, <=6.7.8, <=6.6.5, <=6.5.3, <=6.4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.