Latest medium severity vulnerabilities for "fortinet fortisandbox firmware"

Fortinet FortiSandboxClient-side enforcement of server-side security related to vm download feature

Risk 22

Severity

4.2

First published (updated )

Advisory

FG-IR-24-305

Fortinet FortiSandboxerror based SQLI on device del feature

Risk 22

Severity

4.1

First published (updated )

Advisory

FG-IR-24-353

Fortinet FortiSandboxOS Command Injection in administrative interface

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-24-110

Fortinet FortiSandboxMultiple Reflected and Stored Cross-Site Scripting

Risk 64

Severity

6.9

First published (updated )

Advisory

FG-IR-24-063

Fortinet FortiSandboxSensitive files disclosure in diagnostic logs download

Risk 22

Severity

4.2

First published (updated )

Advisory

FG-IR-24-051

Fortinet FortiAuthenticatorHTTP/2 CONTINUATION Frames Vulnerability

Risk 36

Severity

5.9

First published (updated )

Advisory

FG-IR-24-120

Fortinet FortiSandboxFortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution

Risk 60

Severity

6.5

First published (updated )

Advisory

FG-IR-23-416

Fortinet FortiSandboxArbitrary file read on endpoint

Risk 42

Severity

5.8

First published (updated )

Advisory

FG-IR-24-060

Fortinet FortiSandboxAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 an…

Risk 34

Severity

5.4

First published (updated )

CVE-2022-22305

Fortinet FortiSandboxSQL Injection

Risk 38

Severity

6.5

First published (updated )

CVE-2022-27485

Fortinet FortiWebA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS cre…

Risk 32

Severity

5.3

First published (updated )

CVE-2021-32591

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Risk 42

Severity

5.5

First published (updated )

Advisory

FG-IR-20-070

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Risk 35

Severity

5.3

First published (updated )

Advisory

FG-IR-20-178

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Risk 42

Severity

5.6

First published (updated )

CVE-2020-29012

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Risk 35

Severity

5.5

First published (updated )

CVE-2020-29013

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Risk 34

Severity

5.3

First published (updated )

Advisory

FG-IR-20-209

Fortinet FortiSandboxMultiple heap corruption vulnerabilities in FSA's command shell

Risk 52

Severity

6.4

First published (updated )

Advisory

FG-IR-20-188

Fortinet FortiSandboxPredictable session IDs of FSA's JSON API

Risk 32

Severity

5

First published (updated )

Advisory

FG-IR-20-218

Fortinet FortiSandboxUnauthorized user able to download the device configuration file

Risk 22

Severity

4.2

First published (updated )

Advisory

FG-IR-20-071

Fortinet FortiSandboxUnauthorized user able to download the device configuration file

Risk 22

Severity

4.3

First published (updated )

CVE-2020-15939

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Risk 38

Severity

6.1

First published (updated )

CVE-2021-24014

Fortinet FortiSandboxRace condition vulnerability in FSA's command shell

Risk 46

Severity

6.3

First published (updated )

Advisory

FG-IR-20-185

Fortinet FortiSandboxCommand Injection in FSA sniffer module

Risk 43

Severity

6.2

First published (updated )

Advisory

FG-IR-21-005

Fortinet FortiSandboxRace condition vulnerability in FSA's command shell

Risk 46

Severity

6.3

First published (updated )

CVE-2020-29014

Fortinet FortiSandboxXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2018-1356

Fortinet Fortisandbox FirmwareXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2015-7360

Trending

Versions

Fortinet FortiSandboxClient-side enforcement of server-side security related to vm download feature

Fortinet FortiSandboxerror based SQLI on device del feature

Fortinet FortiSandboxOS Command Injection in administrative interface

Fortinet FortiSandboxMultiple Reflected and Stored Cross-Site Scripting

Fortinet FortiSandboxSensitive files disclosure in diagnostic logs download

Don't miss critical vulnerabilities

Fortinet FortiAuthenticatorHTTP/2 CONTINUATION Frames Vulnerability

Fortinet FortiSandboxFortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution

Fortinet FortiSandboxArbitrary file read on endpoint

Fortinet FortiSandboxAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 an…

Fortinet FortiSandboxSQL Injection

Don't miss critical vulnerabilities

Fortinet FortiWebA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS cre…

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Don't miss critical vulnerabilities

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Fortinet FortiSandboxMultiple heap corruption vulnerabilities in FSA's command shell

Fortinet FortiSandboxPredictable session IDs of FSA's JSON API

Fortinet FortiSandboxUnauthorized user able to download the device configuration file

Fortinet FortiSandboxUnauthorized user able to download the device configuration file

Don't miss critical vulnerabilities

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Fortinet FortiSandboxRace condition vulnerability in FSA's command shell

Fortinet FortiSandboxCommand Injection in FSA sniffer module

Fortinet FortiSandboxRace condition vulnerability in FSA's command shell

Fortinet FortiSandboxXSS

Don't miss critical vulnerabilities

Fortinet Fortisandbox FirmwareXSS

Company

Resources

Contact