CPE Details
Fortinet FortiPortal 7.2.4
7.2.4
2025-02-03
12h12 +00:00
12h12 +00:00
2025-02-03
12h12 +00:00
12h12 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortiportalVersion
7.2.4Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log. | 2.7 |
Bas |
||
| A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through 7.2.8 may allow an authenticated attacker to view the SQL query being run server-side when submitting an HTTP request, via including special elements in said request. | 4.3 |
Moyen |
