Fortinet FortiManager
0 remedies
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*, +1 more
0 remedies
- >= 7.6.0, <= 7.6.1
- >= 7.4.0, <= 7.4.5
- >= 7.4.0, <= 7.4.4
- >= 7.2.1, <= 7.2.8
- >= 7.2.2, <= 7.2.7
Fortinet FortiManager OS Command Injection Vulnerability Allowing Remote Code Execution
Vulnerability
An OS command injection vulnerability has been identified in Fortinet FortiManager. This issue affects versions 7.6.0 through 7.6.1, 7.4.5 through 7.4.0, and 7.2.1 through 7.2.8, as well as FortiManager Cloud versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.4, and 7.2.2 through 7.2.7. The vulnerability arises from improper neutralization of special elements in OS commands, which may allow an authenticated remote attacker to execute unauthorized code by sending crafted FGFM requests.
Impact
Exploitation of this vulnerability could lead to unauthorized code execution on the affected FortiManager instance.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
7.5exploitability
5.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.