Aller au contenu

Vulnérabilités de Fortinet FortiSandbox

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-54018 Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox… 6.5 Moyenne 11 mars 2025
CVE-2024-52960 A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0,… 4.2 Moyenne 11 mars 2025
CVE-2024-52961 An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet… 8.6 Élevée 11 mars 2025
CVE-2024-45328 An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged… 7.1 Élevée 11 mars 2025
CVE-2024-27781 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 6.9 Moyenne 11 févr. 2025
CVE-2024-27778 An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet… 8.3 Élevée 14 janv. 2025
CVE-2024-31490 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through… 4.2 Moyenne 10 sept. 2024
CVE-2024-31491 A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4,… 8.6 Élevée 14 mai 2024
CVE-2024-21755 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… 8.6 Élevée 9 avr. 2024
CVE-2024-21756 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… 8.6 Élevée 9 avr. 2024
CVE-2023-47540 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in… 6.5 Moyenne 9 avr. 2024
CVE-2024-31487 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… 5.8 Moyenne 9 avr. 2024
CVE-2024-23671 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… 7.9 Élevée 9 avr. 2024
CVE-2023-47541 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox… 6.5 Moyenne 9 avr. 2024
CVE-2023-41844 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 3.4 Faible 13 déc. 2023
CVE-2023-45587 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 3.4 Faible 13 déc. 2023
CVE-2023-41836 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 3.4 Faible 13 oct. 2023
CVE-2023-41843 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 7.3 Élevée 13 oct. 2023
CVE-2023-41680 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 7.3 Élevée 13 oct. 2023
CVE-2023-41681 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 7.3 Élevée 13 oct. 2023
CVE-2023-41682 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… 7.9 Élevée 13 oct. 2023
CVE-2022-22305 An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below;… 5.4 Moyenne 1 sept. 2023
CVE-2022-27485 A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in… 6.2 Moyenne 11 avr. 2023
CVE-2022-27487 A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before… 8.3 Élevée 11 avr. 2023
CVE-2022-26115 A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may… 5.4 Moyenne 16 févr. 2023

Autres produits Fortinet