| CVE-2024-54018 |
Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox…
|
6.5
Medium
|
Mar 11, 2025 |
| CVE-2024-52960 |
A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0,…
|
4.2
Medium
|
Mar 11, 2025 |
| CVE-2024-52961 |
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet…
|
8.6
High
|
Mar 11, 2025 |
| CVE-2024-45328 |
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged…
|
7.1
High
|
Mar 11, 2025 |
| CVE-2024-27781 |
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
6.9
Medium
|
Feb 11, 2025 |
| CVE-2024-27778 |
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet…
|
8.3
High
|
Jan 14, 2025 |
| CVE-2024-31490 |
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through…
|
4.2
Medium
|
Sep 10, 2024 |
| CVE-2024-31491 |
A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4,…
|
8.6
High
|
May 14, 2024 |
| CVE-2024-21755 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
8.6
High
|
Apr 9, 2024 |
| CVE-2024-21756 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
8.6
High
|
Apr 9, 2024 |
| CVE-2023-47540 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
6.5
Medium
|
Apr 9, 2024 |
| CVE-2024-31487 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
5.8
Medium
|
Apr 9, 2024 |
| CVE-2024-23671 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
7.9
High
|
Apr 9, 2024 |
| CVE-2023-47541 |
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
|
6.5
Medium
|
Apr 9, 2024 |
| CVE-2023-41844 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
3.4
Low
|
Dec 13, 2023 |
| CVE-2023-45587 |
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
3.4
Low
|
Dec 13, 2023 |
| CVE-2023-41836 |
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
3.4
Low
|
Oct 13, 2023 |
| CVE-2023-41843 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
7.3
High
|
Oct 13, 2023 |
| CVE-2023-41680 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
7.3
High
|
Oct 13, 2023 |
| CVE-2023-41681 |
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
7.3
High
|
Oct 13, 2023 |
| CVE-2023-41682 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
7.9
High
|
Oct 13, 2023 |
| CVE-2022-22305 |
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below;…
|
5.4
Medium
|
Sep 1, 2023 |
| CVE-2022-27485 |
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in…
|
6.2
Medium
|
Apr 11, 2023 |
| CVE-2022-27487 |
A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before…
|
8.3
High
|
Apr 11, 2023 |
| CVE-2022-26115 |
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may…
|
5.4
Medium
|
Feb 16, 2023 |