SQL Injection Vulnerability in Fortinet FortiWLM Software

CVE-2023-34991

What is CVE-2023-34991?

An SQL injection vulnerability exists in Fortinet FortiWLM, affecting multiple versions, which could allow attackers to execute unauthorized commands or code through specially crafted HTTP requests. This flaw could enable an adversary to manipulate SQL queries, potentially leading to unauthorized data access and control over affected systems. Users are urged to apply patch updates and monitor their environments for any suspicious activity.

References