news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2023-48788

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
9.3 Critical
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
Risk score
100.0
Known exploited
CISA KEVEU KEV
Published
2024-03-12
Status
Published

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Weaknesses

CWE-89

Coverage 3

Advisories and references