CVE-2025-58692
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
An SQL Injection vulnerability (CWE-89) in Fortinet FortiVoice 7.2.0 through 7.2.2 and 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Risk Assessment
An authenticated attacker can execute arbitrary commands in the application context, potentially compromising confidentiality, integrity, and availability of the telephony system. This may lead to data access or system takeover.
Recommendation
Update FortiVoice to a patched version. Restrict access to the administrative interface and review privileged accounts.
Other vulnerabilities in FortiVoice
See all- CVE-2025-64156High
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests.
- CVE-2025-60024High
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically crafted HTTP or HTTPS commands.
- CVE-2025-47856High
Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, and before 6.4.10 contain two OS command injection vulnerabilities (CWE-78). A privileged attacker can execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.
Original NVD description (English source)
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS