Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*

part: a version: 2.4.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisandbox (0ddd4eaf-34f0-5dd1-9cda-7103f17de9cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31487 vulnerable 2026-06-08 06:35:31.753431 Details available
MEDIUM (5.8)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to information disclosure via crafted http requests.
Published: 2024-04-09T14:24:21.862Z
Updated: 2026-01-14T13:46:24.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47541 vulnerable 2026-06-08 06:14:24.901348 Details available
MEDIUM (6.5)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions, FortiSandbox 2.3 all versions, FortiSandbox 2.2 all versions, FortiSandbox 2.1 all versions, FortiSandbox 2.0 all versions allows attacker to execute unauthorized code or commands via CLI.
Published: 2024-04-09T14:24:20.501Z
Updated: 2026-01-14T14:42:06.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41682 vulnerable 2026-06-08 06:11:06.443747 Details available
HIGH (7.9)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to denial of service via crafted http requests.
Published: 2023-10-13T14:51:03.342Z
Updated: 2026-01-14T13:46:51.202Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.