← CVE Intelligence

CVE-2024-55593

Fortinet / FortiWeb PUBLISHED

Description (CNA)

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebaffected 7.6.0 through 7.6.1; affected 7.4.0 through 7.4.6; affected 7.2.0 through 7.2.10; affected 7.0.0 through 7.0.10; affected 6.4.0 through 6.4.3; affected 6.3.6 through 6.3.23

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.