CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

312 matches found

Cvelist•added 2025/10/14 3:22 p.m.•11 views

CVE-2024-48891

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-login low privileged shell access via...

7CVSS0.00464EPSS

SaveExploits0References1

Vulnrichment•added 2025/10/14 3:22 p.m.•5 views

CVE-2024-48891

7CVSS6.6AI score0.00464EPSS

SaveExploits0References1

CVE•added 2025/10/14 3:22 p.m.•16 views

CVE-2024-48891

FortiSOAR is affected by an OS Command Injection (CWE-78) due to improper neutralization of special elements. Validated affected versions include 7.6.0–7.6.1, 7.5.0–7.5.1, all 7.4, and all 7.3. The vulnerability could allow an attacker who already has non-login, low-privileged shell access to esc...

7CVSS6.6AI score0.00464EPSS

SaveExploits0References1Affected Software1

Positive Technologies•added 2025/10/14 12:00 a.m.•9 views

PT-2025-41944

Name of the Vulnerable Software and Affected Versions FortiSOAR versions 7.3.x FortiSOAR versions 7.4.x FortiSOAR versions 7.5.0 through 7.5.1 FortiSOAR versions 7.6.0 through 7.6.1 Description An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue CWE-7...

7CVSS6.6AI score0.00464EPSS

SaveExploits0References7

CNNVD•added 2025/10/14 12:00 a.m.•6 views

Fortinet FortiSOAR 操作系统命令注入漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet, Inc. An operating system command injection vulnerability exists in Fortinet FortiSOAR, which stems from improper neutralization of special elements and could result in local elevation of privilege...

7CVSS7.2AI score0.00464EPSS

SaveExploits0References2