CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26097

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.2%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-26097

Fortinet » Fortisandbox » Version: N/A

cpe:2.3:a:fortinet:fortisandbox:-
Fortinet » Fortisandbox » Version: 1.2.0

cpe:2.3:a:fortinet:fortisandbox:1.2.0
Fortinet » Fortisandbox » Version: 1.2.3

cpe:2.3:a:fortinet:fortisandbox:1.2.3
Fortinet » Fortisandbox » Version: 1.3.0

cpe:2.3:a:fortinet:fortisandbox:1.3.0
Fortinet » Fortisandbox » Version: 1.4.0

cpe:2.3:a:fortinet:fortisandbox:1.4.0
Fortinet » Fortisandbox » Version: 1.4.1

cpe:2.3:a:fortinet:fortisandbox:1.4.1
Fortinet » Fortisandbox » Version: 1.4.2

cpe:2.3:a:fortinet:fortisandbox:1.4.2
Fortinet » Fortisandbox » Version: 2.0.0

cpe:2.3:a:fortinet:fortisandbox:2.0.0
Fortinet » Fortisandbox » Version: 2.0.2

cpe:2.3:a:fortinet:fortisandbox:2.0.2
Fortinet » Fortisandbox » Version: 2.0.3

cpe:2.3:a:fortinet:fortisandbox:2.0.3
Fortinet » Fortisandbox » Version: 2.1.0

cpe:2.3:a:fortinet:fortisandbox:2.1.0
Fortinet » Fortisandbox » Version: 2.1.1

cpe:2.3:a:fortinet:fortisandbox:2.1.1
Fortinet » Fortisandbox » Version: 2.1.2

cpe:2.3:a:fortinet:fortisandbox:2.1.2
Fortinet » Fortisandbox » Version: 2.1.3

cpe:2.3:a:fortinet:fortisandbox:2.1.3
Fortinet » Fortisandbox » Version: 2.2.0

cpe:2.3:a:fortinet:fortisandbox:2.2.0
Fortinet » Fortisandbox » Version: 2.2.1

cpe:2.3:a:fortinet:fortisandbox:2.2.1
Fortinet » Fortisandbox » Version: 2.2.2

cpe:2.3:a:fortinet:fortisandbox:2.2.2
Fortinet » Fortisandbox » Version: 2.3.0

cpe:2.3:a:fortinet:fortisandbox:2.3.0
Fortinet » Fortisandbox » Version: 2.3.2

cpe:2.3:a:fortinet:fortisandbox:2.3.2
Fortinet » Fortisandbox » Version: 2.3.3

cpe:2.3:a:fortinet:fortisandbox:2.3.3
Fortinet » Fortisandbox » Version: 2.4.0

cpe:2.3:a:fortinet:fortisandbox:2.4.0
Fortinet » Fortisandbox » Version: 2.4.1

cpe:2.3:a:fortinet:fortisandbox:2.4.1
Fortinet » Fortisandbox » Version: 2.5.0

cpe:2.3:a:fortinet:fortisandbox:2.5.0
Fortinet » Fortisandbox » Version: 2.5.1

cpe:2.3:a:fortinet:fortisandbox:2.5.1
Fortinet » Fortisandbox » Version: 2.5.2

cpe:2.3:a:fortinet:fortisandbox:2.5.2
Fortinet » Fortisandbox » Version: 3.0.0

cpe:2.3:a:fortinet:fortisandbox:3.0.0
Fortinet » Fortisandbox » Version: 3.0.1

cpe:2.3:a:fortinet:fortisandbox:3.0.1
Fortinet » Fortisandbox » Version: 3.0.2

cpe:2.3:a:fortinet:fortisandbox:3.0.2
Fortinet » Fortisandbox » Version: 3.0.3

cpe:2.3:a:fortinet:fortisandbox:3.0.3
Fortinet » Fortisandbox » Version: 3.0.4

cpe:2.3:a:fortinet:fortisandbox:3.0.4
Fortinet » Fortisandbox » Version: 3.0.5

cpe:2.3:a:fortinet:fortisandbox:3.0.5
Fortinet » Fortisandbox » Version: 3.0.6

cpe:2.3:a:fortinet:fortisandbox:3.0.6
Fortinet » Fortisandbox » Version: 3.1.0

cpe:2.3:a:fortinet:fortisandbox:3.1.0
Fortinet » Fortisandbox » Version: 3.1.1

cpe:2.3:a:fortinet:fortisandbox:3.1.1
Fortinet » Fortisandbox » Version: 3.1.2

cpe:2.3:a:fortinet:fortisandbox:3.1.2
Fortinet » Fortisandbox » Version: 3.1.3

cpe:2.3:a:fortinet:fortisandbox:3.1.3
Fortinet » Fortisandbox » Version: 3.1.4

cpe:2.3:a:fortinet:fortisandbox:3.1.4
Fortinet » Fortisandbox » Version: 3.2.0

cpe:2.3:a:fortinet:fortisandbox:3.2.0
Fortinet » Fortisandbox » Version: 3.2.1

cpe:2.3:a:fortinet:fortisandbox:3.2.1
Fortinet » Fortisandbox » Version: 3.2.2

cpe:2.3:a:fortinet:fortisandbox:3.2.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26097

Products

Pricing

Contact Us