Advisories · Technology
Fortinet FortiSandbox Cloud.
Every CVE that names Fortinet FortiSandbox Cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Hard-coded cryptographic key in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox Cloud
- Hard-coded credentials
- CVSS 8.9 High
Improper access control in Fortinet FortiSandbox PaaS and others
- Fortinet FortiSandbox PaaS
- Fortinet FortiSandbox
- Broken access control
- CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
OS command injection in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox Cloud
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Missing authorization in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox PaaS
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Path traversal in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox Cloud
- Path traversal
- CVSS 6.2 Medium
Path traversal in Fortinet FortiSandbox PaaS and others
- Fortinet FortiSandbox PaaS
- Fortinet FortiSandbox Cloud
- Path traversal
- CVSS 6.7 Medium
OS command injection in Fortinet FortiSandbox Cloud and others
- Fortinet FortiSandbox Cloud
- Fortinet FortiSandbox PaaS
- Command injection
- CVSS 6.9 Medium
OS command injection in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox Cloud
- Command injection
- CVSS 4.1 Medium
SQL injection in Fortinet FortiSandbox and others
- Fortinet FortiSandbox
- Fortinet FortiSandbox Cloud
- SQL injection