CVE-2024-31495

2.7 lowEPSS 0.5%

Low (2.7) in fortinet fortiportal. EPSS 0.5% chance of exploitation in the next 30 days.

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiportal

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-128
https://fortiguard.fortinet.com/psirt/FG-IR-24-128

Check your stack JSON