CVSSv3 Score:
6.8
An improper neutralization of special elements used in an SQL command (‘SQL injection’) [CWE-89] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests.
Revised on 2026-04-14 00:00:00
