CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Fortinet. Its EPSS score suggests a 28.8% probability of exploitation in the next 30 days. It involves a SQL injection risk.
CVE
CVE-2023-34991
Severity
CRITICAL
CVSS
9.8
EPSS
28.78%
Fortinet
Original NVD Description
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)