CVE-2015-3616

CRITICAL

Fortinet FortiManager <5.0.11, <5.2.2 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/74444

Vendor Advisory x_refsource_confirm

https://fortiguard.com/psirt/FG-IR-15-011

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032188

Scores

CVSS v3 9.8

EPSS 0.0084

EPSS Percentile 75.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-89

Status published

Products (13)

fortinet/fortimanager_firmware 5.0.0

fortinet/fortimanager_firmware 5.0.1

fortinet/fortimanager_firmware 5.0.2

fortinet/fortimanager_firmware 5.0.3

fortinet/fortimanager_firmware 5.0.4

fortinet/fortimanager_firmware 5.0.5

fortinet/fortimanager_firmware 5.0.6

fortinet/fortimanager_firmware 5.0.7

fortinet/fortimanager_firmware 5.0.8

fortinet/fortimanager_firmware 5.0.9

... and 3 more

Published Aug 11, 2017

Tracked Since Feb 18, 2026