Executive Risk Summary
"A Cross-site Scripting vulnerability in Fortinet FortiSandbox may allow an unauthenticated attacker to execute commands via crafted requests, potentially leading to unauthorized access and data breaches. Affected versions include FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, and all versions of FortiSandbox 4.2 and 4.0."
Operational Audit Arsenal
Manual Verification Required
This is a non-Windows asset (Fortinet). Use the target asset details above to verify your version against vendor advisories.
Patch Impact Forecast
Moderate
Internal Work Notes
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Scope of Impact
Original NVD Description
"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests."