8.8
CVSSv3

CVE-2022-39947

Published: 03/01/2023 Updated: 07/11/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 up to and including 7.0.2, FortiADC version 6.2.0 up to and including 6.2.3, FortiADC version version 6.1.0 up to and including 6.1.6, FortiADC version 6.0.0 up to and including 6.0.4, FortiADC version 5.4.0 up to and including 5.4.5 may allow an malicious user to execute unauthorized code or commands via specifically crafted HTTP requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortiadc 7.0.1

fortinet fortiadc 7.0.0

fortinet fortiadc