Skip to content
CVE PROGRAM SOURCE RECORD2.6 Low

CVE-2022-29059

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and below, 6.3.20 and belo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and below, 6.3.20 and below, 6.2.7 and below may allow a privileged attacker to execute SQL commands over the log database via specifically crafted strings parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiWeb

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.1affected
  • 6.4.0 to ≤ 6.4.3affected
  • 6.3.0 to ≤ 6.3.23affected
  • 6.2.3 to ≤ 6.2.8affected

References