Fortinet Fortinet FortiSandbox
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-29013 | FortiSandbox before 3.2.2 | An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to sile | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-32591 | FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier | A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, F | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-29012 | FortiSandbox 3.2.1, | An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin | MEDIUM 5.6 | 0.5 % | ||
| CVE-2020-15939 | FortiSandbox 3.2.1, 3.1.4 | An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, | MEDIUM 4.3 | 0.6 % | ||
| CVE-2021-24014 | FortiSandbox before 4.0.0 | Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-26096 | FortiSandbox before 4.0.0 | Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to ma | HIGH 8.8 | 0.8 % | ||
| CVE-2021-26097 | FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0, 3.0.6, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0 | An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, | HIGH 8.8 | 1.2 % | ||
| CVE-2020-29011 | FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0 | Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 | HIGH 8.8 | 1.0 % | ||
| CVE-2021-24010 | FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0 | Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may | HIGH 8.1 | 0.9 % | ||
| CVE-2021-26098 | FortiSandbox before 4.0.0 | An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few informa | HIGH 7.5 | 0.8 % | ||
| CVE-2021-22125 | FortiSandbox before 3.2.2 | An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated adm | HIGH 7.2 | 1.4 % | ||
| CVE-2020-29014 | FortiSandbox before 3.2.2 | A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3. | MEDIUM 6.3 | 0.5 % |