> SQL injections in voice and administrative interface
[DATE: 18/11/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
7.7
An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiVoice may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Revised on 2025-11-18 00:00:00