> SQL injection in jsonrpc api
[DATE: 10/03/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
5.6
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer and FortiAnalyzer-BigData API may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.
Revised on 2026-03-10 00:00:00