{"id":"CVE-2023-34991","state":"PUBLISHED","title":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.","description":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http request.","publishedAt":"2023-11-14T18:07:32.529Z","updatedAt":"2025-12-16T18:23:21.749Z","severity":{"score":9.3,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiWLM"],"affected":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","status":"affected","lessThanOrEqual":"8.6.5","versionType":"semver"},{"version":"8.5.0","status":"affected","lessThanOrEqual":"8.5.4","versionType":"semver"},{"version":"8.4.0","status":"affected","lessThanOrEqual":"8.4.2","versionType":"semver"},{"version":"8.3.0","status":"affected","lessThanOrEqual":"8.3.2","versionType":"semver"},{"version":"8.2.2","status":"affected"}]}],"references":["https://fortiguard.com/psirt/FG-IR-23-142"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/34xxx/CVE-2023-34991.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-34991","state":"PUBLISHED","datePublished":"2023-11-14T18:07:32.529Z","dateUpdated":"2025-12-16T18:23:21.749Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2023-06-09T06:59:37.970Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http request."}],"affected":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","status":"affected","lessThanOrEqual":"8.6.5","versionType":"semver"},{"version":"8.5.0","status":"affected","lessThanOrEqual":"8.5.4","versionType":"semver"},{"version":"8.4.0","status":"affected","lessThanOrEqual":"8.4.2","versionType":"semver"},{"version":"8.3.0","status":"affected","lessThanOrEqual":"8.3.2","versionType":"semver"},{"version":"8.2.2","status":"affected"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-142","name":"https://fortiguard.com/psirt/FG-IR-23-142"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2023-11-14T18:07:32.529Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiWLM version 8.6.6 or above \nPlease upgrade to FortiWLM version 8.5.5 or above \n"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-142","name":"https://fortiguard.com/psirt/FG-IR-23-142","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:17:04.270Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-34991","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-08-15T14:59:14.045632Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-16T18:23:21.749Z"}}]}}}