CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-29014
https://notcve.org/view.php?id=CVE-2020-29014
09 Jul 2021 — A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands. Una ejecución concurrente usando recursos compartidos con una sincronización inapropiada ("race condition") en el shell de comandos de FortiSandbox versiones anteriores a 3.2.2, puede permitir a un atacante autenticado llevar el sis... • https://fortiguard.com/advisory/FG-IR-20-185 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1356
https://notcve.org/view.php?id=CVE-2018-1356
09 Apr 2019 — A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component. Una vulnerabilidad Cross-Site-Scripting (XSS) reflejado en Fortinet FortiSandbox, antes de la versión 3.0, puede permitir que un atacante ejecute código o comandos no autorizados a través del parámetro back_url en el componente de análisis de archivos. • http://www.securityfocus.com/bid/107838 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •