← CVE Intelligence

CVE-2022-35847

Fortinet / Fortinet FortiSOAR PUBLISHED

Description (CNA)

An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload.

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiSOARaffected FortiSOAR 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.