Latest vulnerabilities for "fortinet fortisandbox firmware"

Fortinet FortiSandboxBuffer Overflow

Risk 79

Severity

8.8

First published (updated )

CVE-2021-26105

Fortinet FortiSandboxOs command injection on vm download feature

Risk 78

Severity

8.6

First published (updated )

Advisory

FG-IR-24-306

Fortinet FortiSandboxUse of hardcoded key used for remote backup server password encryption

Risk 63

Severity

7.8

First published (updated )

Advisory

FG-IR-24-327

Fortinet FortiSandboxClient-side enforcement of server-side security related to vm download feature

Risk 22

Severity

4.2

First published (updated )

Advisory

FG-IR-24-305

Fortinet FortiSandboxerror based SQLI on device del feature

Risk 22

Severity

4.1

First published (updated )

Advisory

FG-IR-24-353

Fortinet FortiSandboxIncorrect authorization in GUI console

Risk 67

Severity

7.1

First published (updated )

Advisory

FG-IR-24-261

Fortinet FortiSandboxOS Command Injection in administrative interface

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-24-110

Fortinet FortiSandboxMultiple Reflected and Stored Cross-Site Scripting

Risk 64

Severity

6.9

First published (updated )

Advisory

FG-IR-24-063

Fortinet FortiSandboxOS command injection

Risk 77

Severity

8.3

First published (updated )

Advisory

FG-IR-24-061

Fortinet FortiAnalyzerOpenSSH regreSSHion Attack (CVE-2024-6387)

Risk 76

Severity

8.1

First published (updated )

Advisory

FG-IR-24-258

Fortinet FortiSandboxSensitive files disclosure in diagnostic logs download

Risk 22

Severity

4.2

First published (updated )

Advisory

FG-IR-24-051

Fortinet FortiSandboxReadonly user could execute sensitive operations

Risk 78

Severity

8.6

First published (updated )

Advisory

FG-IR-24-054

Fortinet FortiAuthenticatorHTTP/2 CONTINUATION Frames Vulnerability

Risk 36

Severity

5.9

First published (updated )

Advisory

FG-IR-24-120

Fortinet FortiSandboxFortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution

Risk 60

Severity

6.5

First published (updated )

Advisory

FG-IR-23-416

Fortinet FortiSandboxArbitrary file read on endpoint

Risk 42

Severity

5.8

First published (updated )

Advisory

FG-IR-24-060

Fortinet FortiSandboxArbitrary file delete on endpoint

Risk 60

Severity

7.9

First published (updated )

Advisory

FG-IR-23-454

Fortinet FortiSandboxAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 an…

Risk 34

Severity

5.4

First published (updated )

CVE-2022-22305

Fortinet FortiSandboxSQL Injection

Risk 38

Severity

6.5

First published (updated )

CVE-2022-27485

Fortinet FortiDeceptorA improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through …

Risk 79

Severity

8.8

First published (updated )

CVE-2022-27487

Fortinet FortiSandboxA use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbo…

Risk 43

Severity

7.5

First published (updated )

CVE-2022-26115

Fortinet FortiDeceptorAn insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.…

Risk 43

Severity

7.5

First published (updated )

CVE-2022-30305

Fortinet FortiWebA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS cre…

Risk 32

Severity

5.3

First published (updated )

CVE-2021-32591

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Risk 42

Severity

5.5

First published (updated )

Advisory

FG-IR-20-070

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Risk 35

Severity

5.3

First published (updated )

Advisory

FG-IR-20-178

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Risk 42

Severity

5.6

First published (updated )

CVE-2020-29012

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Risk 35

Severity

5.5

First published (updated )

CVE-2020-29013

Fortinet FortiSandboxPath Traversal

Risk 60

Severity

8.1

First published (updated )

CVE-2021-24010

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Risk 34

Severity

5.3

First published (updated )

Advisory

FG-IR-20-209

Fortinet FortiSandboxUncontrolled Resource Consumption (Denial of Service) in login module

Risk 43

Severity

7.3

First published (updated )

Advisory

FG-IR-20-170

Fortinet FortiSandbox[FortiSandbox] - Command injection in FSA's web interface

Risk 79

Severity

8.6

First published (updated )

Advisory

FG-IR-20-198

Trending

Versions

Fortinet FortiSandboxBuffer Overflow

Fortinet FortiSandboxOs command injection on vm download feature

Fortinet FortiSandboxUse of hardcoded key used for remote backup server password encryption

Fortinet FortiSandboxClient-side enforcement of server-side security related to vm download feature

Fortinet FortiSandboxerror based SQLI on device del feature

Don't miss critical vulnerabilities

Fortinet FortiSandboxIncorrect authorization in GUI console

Fortinet FortiSandboxOS Command Injection in administrative interface

Fortinet FortiSandboxMultiple Reflected and Stored Cross-Site Scripting

Fortinet FortiSandboxOS command injection

Fortinet FortiAnalyzerOpenSSH regreSSHion Attack (CVE-2024-6387)

Don't miss critical vulnerabilities

Fortinet FortiSandboxSensitive files disclosure in diagnostic logs download

Fortinet FortiSandboxReadonly user could execute sensitive operations

Fortinet FortiAuthenticatorHTTP/2 CONTINUATION Frames Vulnerability

Fortinet FortiSandboxFortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution

Fortinet FortiSandboxArbitrary file read on endpoint

Don't miss critical vulnerabilities

Fortinet FortiSandboxArbitrary file delete on endpoint

Fortinet FortiSandboxAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 an…

Fortinet FortiSandboxSQL Injection

Fortinet FortiDeceptorA improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through …

Fortinet FortiSandboxA use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbo…

Don't miss critical vulnerabilities

Fortinet FortiDeceptorAn insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.…

Fortinet FortiWebA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS cre…

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Fortinet FortiSandbox[FortiSandbox] fsuis token does not expire after logout

Don't miss critical vulnerabilities

Fortinet FortiSandboxInsufficient validation logic in Fortisandbox sniffer's max file size

Fortinet FortiSandboxPath Traversal

Fortinet FortiSandboxCross-site scripting in FSA due to unsafe use of templating functions

Fortinet FortiSandboxUncontrolled Resource Consumption (Denial of Service) in login module

Fortinet FortiSandbox[FortiSandbox] - Command injection in FSA's web interface

Don't miss critical vulnerabilities

Company

Resources

Contact