Fortianalyzer Big Data vulnerabilities

3 known vulnerabilities in Fortianalyzer Big Data from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  FortiAnalyzer-BigData: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49784Mar 10, 2026Fortinet

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyze

• 7.2 High severity

  FortiAnalyzer: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-40584Feb 11, 2025FortinetEPSS 2.01%

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13

• 8.8 High severity

  FortiManager: Client-Side Enforcement of Server-Side Security

  CVE-2024-23666Nov 12, 2024FortinetEPSS 2.33%

  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7