CVE-2023-23775: Fortinet Fortisoar

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Affected products

• Fortinet Fortisoar: from 7.0.0, before 7.2.1 (fixed in 7.2.1)

Published 2024-06-11. Last modified 2026-06-17.