Fortinet Fortisandbox (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-04-06. Vendor: Fortinet.
CVEs of Fortinet Fortisandbox
- CVE-2020-29013 - CVSS 5.4 (medium), 2022-04-06: An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the…
- CVE-2021-32591 - CVSS 5.3 (medium), 2021-12-08: A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before…
- CVE-2020-29012 - CVSS 5.6 (medium), 2021-09-08: An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs…
- CVE-2020-15939 - CVSS 4.3 (medium), 2021-09-06: An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged…
- CVE-2021-24014 - CVSS 6.1 (medium), 2021-08-04: Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated…
- CVE-2021-22124 - CVSS 7.5 (high), 2021-08-04: An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and…
- CVE-2021-26096 - CVSS 8.8 (high), 2021-08-04: Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory…
- CVE-2021-26097 - CVSS 8.8 (high), 2021-08-04: An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through…
- CVE-2020-29011 - CVSS 8.8 (high), 2021-08-04: Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may…
- CVE-2021-24010 - CVSS 8.1 (high), 2021-08-04: Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an…
- CVE-2021-26098 - CVSS 7.5 (high), 2021-08-04: An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about…
- CVE-2021-22125 - CVSS 7.2 (high), 2021-07-20: An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to…
- CVE-2020-29014 - CVSS 6.3 (medium), 2021-07-09: A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an…
