Fortinet: >> Fortianalyzer >> 7.0.5 Security Vulnerabilities
An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-04-11
A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names.
CVSS Score
4.0
EPSS Score
0.003
Published
2023-03-07
Page 6