Known vulnerabilities in FortiSandbox - page 2

Software: FortiSandbox
Software CPE: cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 68
Public exploits: 6
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiSandbox FortiSandbox is affected by 68 known vulnerabilities: 2 critical, 5 high, 34 medium, 27 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108755 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-54026
CWE-89 Low
No
No
4.4.7 07.05.2025 SB2025031201
#VU107309 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27781
CWE-79 Low
No
No
4.0.5, 4.2.7, 4.4.5 09.04.2025 SB2025040974
#VU105623 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-52961
CWE-78 Medium
No
No
4.0.6, 4.2.8, 4.4.7, 5.0.1 12.03.2025 SB2025031213
#VU105621 - Client-Side Enforcement of Server-Side Security
CVE-2024-52960
CWE-602 Low
No
No
4.2.8, 4.4.7, 5.0.1 12.03.2025 SB2025031207
#VU105616 - Use of Hard-coded Cryptographic Key
CVE-2024-54027
CWE-321 Low
No
No
4.0.6, 4.2.8, 4.4.7, 5.0.1 12.03.2025 SB2025031202
#VU105615 - Incorrect Authorization
CVE-2024-45328
CWE-863 Medium
No
No
4.4.7 12.03.2025 SB2025031201
#VU105611 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-54018
CWE-78 Low
No
No
4.4.6 11.03.2025 SB20250311113
#VU97004 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31490
CWE-200 Low
No
No
4.2.7, 4.4.5 10.09.2024 SB2024091084
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
4.0.6, 4.2.8, 4.4.7 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU89562 - Server-Side Request Forgery (SSRF)
CVE-2024-31491
CWE-918 Medium
No
No
4.2.7, 4.4.5 15.05.2024 SB2024051533
#VU88652 - Resource exhaustion
CVE-2024-3302
CWE-400 Low
No
No
4.4.6 17.04.2024 SB2024041746
SB2024041794
SB2024041795
and 34 more
#VU88323 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23671
CWE-22 Low
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88321 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21756
CWE-78 Medium
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88320 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21755
CWE-78 Medium
No
No
4.0.5, 4.2.7, 4.4.4 09.04.2024 SB2024040983
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
4.4.6 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
4.4.6 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
4.4.6 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
4.4.6 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
4.4.6 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
4.4.6 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more


Showing elements 21 - 40 out of 68