| CVE-2020-29013 |
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an…
|
5.4
Medium
|
Apr 6, 2022 |
| CVE-2021-32591 |
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in…
|
5.3
Medium
|
Dec 8, 2021 |
| CVE-2020-29012 |
An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse…
|
5.6
Medium
|
Sep 8, 2021 |
| CVE-2020-15939 |
An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may…
|
4.3
Medium
|
Sep 6, 2021 |
| CVE-2021-24014 |
Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before…
|
5.4
Medium
|
Aug 4, 2021 |
| CVE-2021-26096 |
Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an…
|
6.4
Medium
|
Aug 4, 2021 |
| CVE-2021-26097 |
An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through…
|
8.8
High
|
Aug 4, 2021 |
| CVE-2020-29011 |
Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0…
|
8.8
High
|
Aug 4, 2021 |
| CVE-2021-24010 |
Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and…
|
8.1
High
|
Aug 4, 2021 |
| CVE-2021-26098 |
An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in…
|
5.3
Medium
|
Aug 4, 2021 |
| CVE-2021-22125 |
An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may…
|
6.3
Medium
|
Jul 20, 2021 |
| CVE-2020-29014 |
A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of…
|
6.3
Medium
|
Jul 9, 2021 |