CVE-2025-49784: SQL injection in jsonrpc api
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer and FortiAnalyzer-BigData API may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.
Other sources
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigData 7.6.0, FortiAnalyzer-BigData 7.4.0 through 7.4.4, FortiAnalyzer-BigData 7.2 all versions, FortiAnalyzer-BigData 7.0 all versions, FortiAnalyzer-BigData 6.4 all versions, FortiAnalyzer-BigData 6.2 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49784?
CVE-2025-49784 has a high severity rating due to its potential for SQL injection leading to unauthorized code execution.
How do I fix CVE-2025-49784?
To fix CVE-2025-49784, upgrade FortiAnalyzer to version 7.6.5 or 7.4.8 as recommended by Fortinet.
Which products are affected by CVE-2025-49784?
CVE-2025-49784 affects FortiAnalyzer and FortiAnalyzer-BigData versions between specific ranges, notably 7.6.0 to 7.6.4 and 7.4.0 to 7.4.8.
Who is vulnerable to CVE-2025-49784?
Organizations using vulnerable versions of FortiAnalyzer or FortiAnalyzer-BigData are at risk if they have not patched to the latest versions.
Is authentication required to exploit CVE-2025-49784?
Yes, CVE-2025-49784 requires an authenticated attacker to exploit the SQL injection vulnerability.