Vulnerability Database

319,592

Total vulnerabilities in the database

CVE-2024-31490

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2.2 through 3.2.4, FortiSandbox 3.1.5 allows attacker to information disclosure via HTTP get requests.

  • Published: Sep 10, 2024
  • Updated: Jan 15, 2026
  • CVE: CVE-2024-31490
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
fortinet / fortisandbox 4.4.0 4.4.5
fortinet / fortisandbox 3.2.2 4.2.7
fortinet / fortisandbox 3.1.5 3.1.5.x