Known vulnerabilities in FortiSandbox - page 3

Software: FortiSandbox
Software CPE: cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiSandbox FortiSandbox is affected by 66 known vulnerabilities: 2 critical, 4 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88319 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-31487
CWE-22 Medium
No
No
4.2.7, 4.4.5 09.04.2024 SB2024040980
#VU84438 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41844
CWE-79 Medium
No
No
4.4.3 14.12.2023 SB2023121475
#VU84437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45587
CWE-79 Medium
No
No
4.4.3 14.12.2023 SB2023121475
#VU82051 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41682
CWE-22 Medium
No
No
4.2.6, 4.4.0, 4.4.2 16.10.2023 SB2023101629
#VU82050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41836
CWE-79 Low
No
No
4.2.6, 4.4.2 16.10.2023 SB2023101628
#VU82049 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41843
CWE-79 Low
No
No
4.0.4, 4.2.6, 4.4.2 16.10.2023 SB2023101627
#VU82048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41680
CWE-79 Medium
No
No
4.0.4, 4.2.6, 4.4.2 16.10.2023 SB2023101627
#VU75064 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27485
CWE-89 Medium
No
No
3.2.4, 4.0.3, 4.2.1 13.04.2023 SB2023041318
#VU75063 - Improper Access Control
CVE-2022-27487
CWE-284 Medium
No
No
3.2.4, 4.0.3, 4.2.3 13.04.2023 SB2023041317
#VU72353 - Use of Password Hash With Insufficient Computational Effort
CVE-2022-26115
CWE-916 Low
No
No
4.2.0 17.02.2023 SB2023021724
#VU69938 - Insufficient Logging
CVE-2022-30305
CWE-778 Medium
No
No
4.2.1 06.12.2022 SB2022120632
SB2022120633
#VU64051 - Improper Certificate Validation
CVE-2022-22305
CWE-295 Medium
No
No
4.2.0 08.06.2022 SB2022060801
#VU58633 - Missing Required Cryptographic Step
CVE-2021-32591
CWE-325 Medium
No
No
3.2.3, 4.0.1 07.12.2021 SB2021120720
SB2021120721
#VU57070 - Stack-based buffer overflow
CVE-2021-26105
CWE-121 Medium
No
No
3.2.3, 4.0.1 05.10.2021 SB2021100516
#VU56384 - Insufficient Session Expiration
CVE-2020-29012
CWE-613 Medium
No
No
3.2.2 07.09.2021 SB2021090717
#VU56383 - Improper input validation
CVE-2020-29013
CWE-20 Low
No
No
3.2.2 07.09.2021 SB2021090717
#VU55550 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-24010
CWE-22 Medium
No
No
3.1.5, 3.2.3, 4.0.0 03.08.2021 SB2021080315
#VU55549 - Heap-based Buffer Overflow
CVE-2021-26096
CWE-122 Medium
No
No
3.1.5, 3.2.3, 4.0.0 03.08.2021 SB2021080315
#VU55548 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-24014
CWE-79 Low
No
No
3.2.3, 4.0.0 03.08.2021 SB2021080315
#VU55547 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-26097
CWE-78 Medium
No
No
3.0.7, 3.1.5, 3.2.3, 4.0.0 03.08.2021 SB2021080315


Showing elements 41 - 60 out of 66