Known vulnerabilities in FortiSandbox - page 2

Software: FortiSandbox
Software CPE: cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiSandbox FortiSandbox is affected by 66 known vulnerabilities: 2 critical, 4 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108755 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-54026
CWE-89 Low
No
No
4.4.7 07.05.2025 SB2025031201
#VU105621 - Client-Side Enforcement of Server-Side Security
CVE-2024-52960
CWE-602 Low
No
No
4.2.8, 4.4.7, 5.0.1 12.03.2025 SB2025031207
#VU105616 - Use of Hard-coded Cryptographic Key
CVE-2024-54027
CWE-321 Low
No
No
4.0.6, 4.2.8, 4.4.7, 5.0.1 12.03.2025 SB2025031202
#VU105615 - Incorrect Authorization
CVE-2024-45328
CWE-863 Medium
No
No
4.4.7 12.03.2025 SB2025031201
#VU105611 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-54018
CWE-78 Low
No
No
4.4.6 11.03.2025 SB20250311113
#VU97004 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31490
CWE-200 Low
No
No
4.2.7, 4.4.5 10.09.2024 SB2024091084
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
4.0.6, 4.2.8, 4.4.7 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU89562 - Server-Side Request Forgery (SSRF)
CVE-2024-31491
CWE-918 Medium
No
No
4.2.7, 4.4.5 15.05.2024 SB2024051533
#VU88652 - Resource exhaustion
CVE-2024-3302
CWE-400 Low
No
No
4.4.6 17.04.2024 SB2024041746
SB2024041794
SB2024041795
and 34 more
#VU88329 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47540
CWE-78 Low
No
No
4.2.7, 4.4.3 09.04.2024 SB2024040982
#VU88327 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-47541
CWE-22 Low
No
No
4.2.7, 4.4.3 09.04.2024 SB2024040982
#VU88323 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23671
CWE-22 Low
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88321 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21756
CWE-78 Medium
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88320 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21755
CWE-78 Medium
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
4.4.6 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
4.4.6 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
4.4.6 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
4.4.6 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
4.4.6 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
4.4.6 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more


Showing elements 21 - 40 out of 66