VULNERABILITY INTELLIGENCE

CVE-2025-54353

CVSS score6.1 MEDIUM

EPSS probability6.31%

CISA KEVNot currently listed

Published2025-12-09

Last modified2026-10-08

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an attacker to perform an XSS attack via crafted HTTP requests.