SQL injection in file-transfer system via a crafted Host header, as exploited in the wild per CISA KEV.
CVE-2020-12271
SQL injection in firewall product's admin interface or user portal, as exploited in the wild per CISA KEV.
CVE-2019-3792