Security Advisory

CVE-2023-37931

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-14 14:10:00

Last updated 2025-02-18 21:35:20

Assigner fortinet

CVSS score 8.6

State PUBLISHED

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests

← Browse all CVEs View on cve.org ↗