FortiAnalyzer-BigData vulnerabilities

3 known vulnerabilities in FortiAnalyzer-BigData from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FortiManager: Improper Encoding or Escaping of Output

  CVE-2026-126170Nov 11, 2026Fortinet

  A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.

• 7.2 High severity

  FortiManager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-61848Apr 14, 2026Fortinet

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyze

• 7.2 High severity

  FortiAnalyzer-BigData: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49784Mar 10, 2026Fortinet

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyze