PT-2026-24231 · Fortinet · Fortianalyzer-Bigdata+1

CVE-2025-49784

·

Publicado

2026-03-10

·

Atualizado

2026-03-17

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.2 through 7.6.4 Fortinet FortiAnalyzer-BigData versions 6.2 through 7.6.0 Fortinet FortiAnalyzer-BigData versions 7.4.0 through 7.4.4
Description This issue involves an improper neutralization of special elements within SQL commands, commonly known as SQL injection. An authenticated attacker could potentially execute unauthorized code or commands by sending specifically crafted requests. The vulnerability exists in Fortinet FortiAnalyzer and Fortinet FortiAnalyzer-BigData.
Recommendations Fortinet FortiAnalyzer version 6.2 should be updated. Fortinet FortiAnalyzer versions 6.3 and 6.4 should be updated. Fortinet FortiAnalyzer version 7.0 should be updated. Fortinet FortiAnalyzer version 7.2 should be updated. Fortinet FortiAnalyzer versions 7.4.0 through 7.4.7 should be updated. Fortinet FortiAnalyzer versions 7.6.0 through 7.6.4 should be updated. Fortinet FortiAnalyzer-BigData version 6.2 should be updated. Fortinet FortiAnalyzer-BigData version 7.0 should be updated. Fortinet FortiAnalyzer-BigData version 7.2 should be updated. Fortinet FortiAnalyzer-BigData versions 7.4.0 through 7.4.4 should be updated. Fortinet FortiAnalyzer-BigData version 7.6.0 should be updated.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2026-05208
CVE-2025-49784

Produtos afetados

Fortianalyzer
Fortianalyzer-Bigdata