Vulnerabilities > CVE-2024-31495 - Unspecified vulnerability in Fortinet Fortiportal
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |