Fortinet Security Updates – 12 March 2025

The addressed vulnerabilities could allow the attacker to perform denial of service attacks, gain elevated privileges, obtain sensitive information, bypass security restrictions, conduct cross-site scripting attacks, conduct cross-site request forgery attacks, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. FortiSandbox OS Command Injection Vulnerability (CVE-2024-52961):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Access

2. FortiADC Cross-site Scripting Vulnerability (CVE-2023-37933):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Cross-site Scripting

Sample of the affected products:

• FortiAnalyzer.
• FortiOS.
• FortiProxy.
• FortiSandbox.
• FortiWeb.
• FortiSIEM.
• FortiMail.