Medium WID-SEC-2025-2791 3 CVEs

Fortinet FortiSandbox: Mehrere Schwachstellen

Published Dec 9, 2025 · Updated Dec 9, 2025 · de-DE

Vendor: Fortinet Product: FortiSandbox

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiSandbox ausnutzen, um beliebigen Programmcode auszuführen oder einen Cross Site Scripting Angriff durchzuführen.

Product

FortiSandbox ist eine Advanced Threat Detection Appliance.

Vulnerabilities 3

High 7.0

CVE-2025-53949 EPSS 17%

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…

Fortinet FortiSandbox Network devices

Dec 9, 2025
Medium 6.9

CVE-2025-53679 EPSS 12%

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vu…

Fortinet FortiSandbox FortiSandbox Cloud Network devices

Dec 9, 2025
Medium 5.3

CVE-2025-54353

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…

Fortinet FortiSandbox Network devices

Dec 9, 2025

Revision history

2025-12-09 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-25-454 vom 2025-12-09
https://www.fortiguard.com/psirt/FG-IR-25-454
FortiGuard PSIRT Advisory FG-IR-25-477 vom 2025-12-09
https://www.fortiguard.com/psirt/FG-IR-25-477
FortiGuard PSIRT Advisory FG-IR-25-479 vom 2025-12-09
https://www.fortiguard.com/psirt/FG-IR-25-479