VDB

CVE-2023-48785

CVE-2023-48785 PUBLISHED CVSS 8.600000381469727 HIGH

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests..

EPSS 0.17% · 6.2th percentile

Risk Scores

CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
EPSS Score
0.17%
6.2th percentile

Affected Products

VendorProductVersions
FortinetFortiSandbox4.4.0, 4.2.1, 4.0.0
fortinetfortisandbox4.0.0, 4.2.0, 4.4.0

Timeline

  • Apr 10, 2024 CVE Published
  • Mar 14, 2025 Coalition ESS Score
  • Mar 15, 2025 EPSS Score
  • Mar 29, 2025 EPSS Score
  • Apr 11, 2025 EPSS Score
  • Apr 25, 2025 EPSS Score
  • May 8, 2025 EPSS Score
  • May 22, 2025 EPSS Score
  • Jun 5, 2025 EPSS Score
  • Jun 18, 2025 EPSS Score
  • Jul 2, 2025 EPSS Score
  • Jul 15, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›