CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects Fortinet. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-59922
Severity
HIGH
CVSS
7.2
EPSS
6.99%
Fortinet
Original NVD Description
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.
Related CVEs
Other vulnerabilities affecting the same vendor(s)