CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2025/01/14 2:15 p.m.•32 views

CVE-2024-27778

An improper neutralization of special elements used in an OS Command vulnerability CWE-78 vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0....

8.8CVSS0.0055EPSS

Exploits0References1

CVE•added 2025/01/14 2:9 p.m.•49 views

CVE-2024-27778

CVE-2024-27778 : Fortinet FortiSandbox OS command injection vulnerability (CWE-78). An authenticated attacker with at least read-only privileges can execute unauthorized OS commands via crafted requests. Affected FortiSandbox versions span 3.0.5–3.0.7, 3.1, 3.2, 4.0.0–4.0.4, 4.2.1–4.2.6, and 4.4....

8.8CVSS6.5AI score0.0055EPSS

Exploits0References1Affected Software1