Fortinet: >> Fortisandbox >> 2.4.0 Security Vulnerabilities
An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs.
CVSS Score
5.3
EPSS Score
0.003
Published
2021-08-04
An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.
CVSS Score
6.3
EPSS Score
0.003
Published
2021-07-20
A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands.
CVSS Score
6.3
EPSS Score
0.005
Published
2021-07-09
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
CVSS Score
6.1
EPSS Score
0.003
Published
2019-04-09
Page 2