Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-58692

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.

Published

2025-11-18T17:16:06.963

Last Modified

2025-11-20T14:36:17.687

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortivoice < 7.0.8 Yes
Application fortinet fortivoice < 7.2.3 Yes
References