CVE-2024-35275

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Jan 14, 2025
CWE ID 89

Summary

CVE-2024-35275 is a vulnerability affecting Fortinet FortiAnalyzer versions 7.4.0 through 7.4.2 and FortiManager versions 7.4.0 through 7.4.2. An attacker can exploit this sql injection flaw to escalate privileges by sending specially crafted HTTP requests that contain malicious SQL commands. This vulnerability could potentially allow unauthorized access or data manipulation, posing a significant risk to organizations using these Fortinet products. Users are advised to update their software to the latest versions to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • FortiAnalyzer
  • FortiManager

Affected Vendors

  • Fortinet

Advisories, Assessments, and Mitigations