Vulnerability Details CVE-2021-24014
Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 4.3
Products affected by CVE-2021-24014
-
cpe:2.3:a:fortinet:fortisandbox:-
-
cpe:2.3:a:fortinet:fortisandbox:1.2.0
-
cpe:2.3:a:fortinet:fortisandbox:1.2.3
-
cpe:2.3:a:fortinet:fortisandbox:1.3.0
-
cpe:2.3:a:fortinet:fortisandbox:1.4.0
-
cpe:2.3:a:fortinet:fortisandbox:1.4.1
-
cpe:2.3:a:fortinet:fortisandbox:1.4.2
-
cpe:2.3:a:fortinet:fortisandbox:2.0.0
-
cpe:2.3:a:fortinet:fortisandbox:2.0.2
-
cpe:2.3:a:fortinet:fortisandbox:2.0.3
-
cpe:2.3:a:fortinet:fortisandbox:2.1.0
-
cpe:2.3:a:fortinet:fortisandbox:2.1.1
-
cpe:2.3:a:fortinet:fortisandbox:2.1.2
-
cpe:2.3:a:fortinet:fortisandbox:2.1.3
-
cpe:2.3:a:fortinet:fortisandbox:2.2.0
-
cpe:2.3:a:fortinet:fortisandbox:2.2.1
-
cpe:2.3:a:fortinet:fortisandbox:2.2.2
-
cpe:2.3:a:fortinet:fortisandbox:2.3.0
-
cpe:2.3:a:fortinet:fortisandbox:2.3.2
-
cpe:2.3:a:fortinet:fortisandbox:2.3.3
-
cpe:2.3:a:fortinet:fortisandbox:2.4.0
-
cpe:2.3:a:fortinet:fortisandbox:2.4.1
-
cpe:2.3:a:fortinet:fortisandbox:2.5.0
-
cpe:2.3:a:fortinet:fortisandbox:2.5.1
-
cpe:2.3:a:fortinet:fortisandbox:2.5.2
-
cpe:2.3:a:fortinet:fortisandbox:3.0.0
-
cpe:2.3:a:fortinet:fortisandbox:3.0.1
-
cpe:2.3:a:fortinet:fortisandbox:3.0.2
-
cpe:2.3:a:fortinet:fortisandbox:3.0.3
-
cpe:2.3:a:fortinet:fortisandbox:3.0.4
-
cpe:2.3:a:fortinet:fortisandbox:3.0.5
-
cpe:2.3:a:fortinet:fortisandbox:3.0.6
-
cpe:2.3:a:fortinet:fortisandbox:3.0.7
-
cpe:2.3:a:fortinet:fortisandbox:3.1.0
-
cpe:2.3:a:fortinet:fortisandbox:3.1.1
-
cpe:2.3:a:fortinet:fortisandbox:3.1.2
-
cpe:2.3:a:fortinet:fortisandbox:3.1.3
-
cpe:2.3:a:fortinet:fortisandbox:3.1.4
-
cpe:2.3:a:fortinet:fortisandbox:3.2.0
-
cpe:2.3:a:fortinet:fortisandbox:3.2.1
-
cpe:2.3:a:fortinet:fortisandbox:3.2.2