Vulnetix
Try Vulnetix Request Demo
CVE-2025-52436 PUBLISHED CVSS 5.199999809265137 MEDIUM

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests.

EPSS 0.27% · 50.1th percentile

Risk Scores

CVSS v3.1
5.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
0.27%
50.1th percentile

Affected Products

VendorProductVersions
fortinetfortisandbox4.0.0, 5.0.0
FortinetFortiOS6.4.3, 7.4.0, 7.0.0

Timeline

References

Open in Interactive Console →