Description
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, version 6.5.3 and below, version 6.4.4 and below Update/Create Case feature may allow an authenticated attacker to extract database information via crafted requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSIEM | 7.1.0 – ≤ 7.1.7, 7.0.0 – ≤ 7.0.3, 6.7.0 – ≤ 6.7.9, 6.6.0 – ≤ 6.6.5, 6.5.0 – ≤ 6.5.3, 6.4.0 – ≤ 6.4.4 | — |
Advisories 1
- WID-SEC-2025-0067 Fortinet FortiSIEM: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 14, 2025