Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14765
HistoryJan 12, 2024 - 12:00 a.m.

Fortinet FortiVoice Path Traversal Vulnerability

2024-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
fortinet
fortivoice
path traversal
vulnerability
network communications
http
https
arbitrary files
security

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

30.0%

Fortinet FortiVoice is a network communications solution from Fortinet, Inc. A path traversal vulnerability exists in FortiVoice fortivoice. The vulnerability stems from the program failing to properly filter for special elements in the path of a resource or file. An attacker could exploit the vulnerability by sending specially crafted HTTP or HTTPS to read arbitrary files from the system.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

30.0%

Related for CNVD-2024-14765