← Database

CVE-2022-42477

HIGH CVSS: 7.1 Published: 2023-04-11 Modified: 2026-06-17

Description

An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.

Affected Platforms

Fortinet Fortianalyzer

Weakness Type

CWE-20, CWE-20

References