VULNERABILITY INTELLIGENCE

CVE-2020-29011

CVSS score8.8 HIGH
EPSS probability0.98%
CISA KEVNot currently listed
Published2021-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references