CVE-2025-46773: SQL Injection
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.4.8 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.6.5 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.4.10 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.6.5 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 8.0.0 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 6.4.16 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 7.6.5 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.4.7 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.6.5 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 8.0.0
Event History
Frequently Asked Questions
Which deployments should be prioritized for remediation?
FortiAnalyzer 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, and all FortiAnalyzer 7.2 versions are affected. FortiAnalyzer Cloud is affected in 7.6.2 through 7.6.4, 7.4.1 through 7.4.7, and 7.2.1 through 7.2.11.
What level of access does an attacker need?
Exploitation requires a low-privileged user account. The provided information does not indicate that an unauthenticated attacker can exploit the issue.
What is the potential impact after exploitation?
A low-privileged user can send crafted requests to execute arbitrary commands. The listed severity metrics indicate high impacts to confidentiality, integrity, and availability.