CVE-2025-53608

medium Fortinet
CVSS v3 Base Score
4.8
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Published: March 10, 2026
Last Modified: March 12, 2026
Vendor: Fortinet
Source: NVD

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated privileged attacker to execute code via crafted requests.

CWE

CWE-79

Affected Products

fortinet fortisandbox

References

🔗 fortiguard.fortinet.com