Lucene search
FortiGuard LabsFG-IR-20-209HistoryAug 03, 2021 - 12:00 a.m.
FortiSandbox - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
2021-08-0300:00:00
FortiGuard Labs
www.fortiguard.com
10
0.001 Low
EPSS
Percentile
35.7%
Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortisandbox | eq | 3.2.2 | |
| fortisandbox | eq | 3.2.1 | |
| fortisandbox | eq | 3.2.0 | |
| fortisandbox | eq | 3.1.5 | |
| fortisandbox | eq | 3.1.4 | |
| fortisandbox | eq | 3.1.3 | |
| fortisandbox | eq | 3.1.2 | |
| fortisandbox | eq | 3.1.1 | |
| fortisandbox | eq | 3.1.0 |
Related
prion
prion
Input validation
2021-08-04 19:15:00
cvelist
cvelist
CVE-2021-24014
2021-08-04 18:11:11
cnvd
cnvd
Fortinet FortiSandbox Cross-Site Scripting Vulnerability
2021-08-05 00:00:00
cve
cve
CVE-2021-24014
2021-08-04 19:15:08
nvd
nvd
CVE-2021-24014
2021-08-04 19:15:08