Fortinet PSIRT Monthly Advisories — April 2024
Tuesday, 9 April 2024
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
All vulnerabilities 12
Critical1 ShowHide
High5 ShowHide
-
High 8.6
CVE-2024-21755 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiS…EPSS 2.5%
-
High 8.6
CVE-2024-21756 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiS…EPSS 2.2%
-
High 7.9
CVE-2024-23671 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1…EPSS 1.2%
- High 7.8
- High 7.5
Medium6 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.3
- Medium 6.1
- Medium 5.8
- Medium 5.0