Vulnerabilityhigh

Fortinet and Zoho Urge Customers to Patch Enterprise Software Vulnerabilities

The Hacker Newsby @TheHackersNewsJan 5, 2023 · 07:52 UTC (Jan 5, 2023)1 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2022-39947 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-39947 CVE-2022-35845 CVE-2022-47523

Tags: cve-2022-39947 cve-2022-35845 cve-2022-47523 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2022-35845	Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester 7.1.0, 7.0 all…	8.8	1%	Jan 3, 2023
CVE-2022-39947	A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version…	8.8	3%	Jan 3, 2023
CVE-2022-47523	Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection	9.8	71%	Jan 5, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 05, 2023 Application Security / SQLi Fortinet has warned of a high-severity flaw affecting multiple versions of FortiADC application delivery controller that could lead to the execution of arbitrary code.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.