Not scored
CVE-2025-52436
Fortinet FortiSandbox vulnerability
FortinetFortiSandbox
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
7.3%probability of exploitation in the next 30 days
Higher than 94% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.
Coverage 1 article · 1 outlet
- Fortinet Patches High-Severity VulnerabilitiesSecurityWeek · first in our coverage