CVE-2025-49784

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDa...

EUVD-2025-208488

An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDa...

CVE-2025-49784

The CVE-2025-49784 issue is an SQL injection in Fortinet FortiAnalyzer and FortiAnalyzer-BigData. Affected versions include FortiAnalyzer 7.6.0–7.6.4, 7.4.0–7.4.7, all 7.2/7.0, and FortiAnalyzer-BigData 7.6.0–7.4.4, 7.2, 7.0, plus 6.4/6.2 series. The root cause is improper neutralization of speci...

PT-2026-24231

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.2 through 7.6.4 Fortinet FortiAnalyzer-BigData versions 6.2 through 7.6.0 Fortinet FortiAnalyzer-BigData versions 7.4.0 through 7.4.4 Description This issue involves an improper neutralization of special...

Fortinet FortiAnalyzer sqli (FG-IR-26-095)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-095 advisory. - An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet...

Fortinet FortiManager FortiAnalyzer Buffer Overflow

The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis tools, is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute...