Fortinet FortiVoice 7.2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*
part: a version: 7.2.2 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortivoice (a311f371-4e64-50e1-800f-e95f5aeab3ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-60024 |
vulnerable | 2026-06-08 07:37:26.503291 |
Details available
HIGH (7.7)
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands
Published: 2025-12-09T17:18:44.551Z
Updated: 2026-02-26T16:57:02.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58693 |
vulnerable | 2026-06-08 07:35:19.016621 |
Details available
MEDIUM (5.7)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Published: 2026-01-13T16:32:29.011Z
Updated: 2026-01-14T09:16:23.320Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58692 |
vulnerable | 2026-06-08 07:35:19.012964 |
Details available
HIGH (7.7)
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Published: 2025-11-18T17:01:13.626Z
Updated: 2026-02-26T16:21:13.116Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.