CVE-2023-45587 LOW

CVE-2023-45587

Vendor Fortinet
Product FortiSandbox
Weakness CWE-79 · XSS
Published December 13, 2023
Last update January 14, 2026
View on NVD All CVEs

CVSS base score

3.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:F/RL:X/RC:X

What the vulnerability does

01Description

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions allows attacker to execute unauthorized code or commands via crafted HTTP requests

Key dates

02Disclosure timeline

December 13, 2023 CVE published
January 14, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4804 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration CVE-2019-1671 Cisco Firepower Management Center Cross-Site Scripting Vulnerability CVE-2025-31605 WordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-43951 WordPress Tempera theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-4107 Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting