Vulnerabilities > CVE-2023-23775 - Unspecified vulnerability in Fortinet Fortisoar
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |