A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspecified vectors, which could let a malicious user run systems commands when executing a report.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortimanager | 5.0.0 | 5.0.10.x |
| fortinet / fortimanager | 5.2.0 | 5.2.1.x |