Vulnerabilities > Fortinet > Fortisandbox > 2.1.0

DATE CVE VULNERABILITY TITLE RISK
2021-07-09 CVE-2020-29014 Race Condition vulnerability in Fortinet Fortisandbox
A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands.
network
high complexity
fortinet CWE-362
5.3
5.3
2019-04-09 CVE-2018-1356 Cross-site Scripting vulnerability in Fortinet Fortisandbox
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
network
low complexity
fortinet CWE-79
6.1
6.1