CVE-2021-24014: Fortinet FortiSandbox

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.

Affected products

• Fortinet FortiSandbox: up to and including 3.1.4; from 3.2.0, before 3.2.3 (fixed in 3.2.3)

Published 2021-08-04. Last modified 2026-06-17.