FO
Product
FortiNAC
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 10Low 0
Watch
Add FortiNAC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41021 | 6.7 | Dec 8 | A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command Affected: 8.8.0; 8.8.1; 8.8.2; 8.8.3; 8.8.4; 8.8.5; +6 more |
| CVE-2023-26206 | 6.1 | Feb 15 | An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an… Affected: 9.4.0 through 9.4.2; 9.2.0 through 9.2.8; 9.1.0 through 9.1.10; 7.2.0 |
| CVE-2022-38376 | 6.1 | Feb 16 | Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an… Affected: 8.5.0 through 8.5.4; 8.6.0 before 9.4.2; 8.3.7 |
| CVE-2020-12816 | 6.1 | Sep 24 | An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the… Affected: before 8.7.3 |
| CVE-2019-5594 | 6.1 | Aug 23 | An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated… Affected: 8.3.0 through 8.3.6; 8.5.0 |
| CVE-2022-40676 | 5.4 | Mar 7 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5; 8.7.0 through 8.7.6; 8.8.0 through 8.8.11; 9.1.0 through 9.1.8; 9.2.0 through 9.2.5; +2 more |
| CVE-2023-22638 | 5.4 | Feb 16 | Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5; 8.7.0 through 8.7.6; 8.8.0 through 8.8.11; 9.1.0 through 9.1.9; 9.2.0 through 9.2.7; +3 more |
| CVE-2023-33300 | 5.3 | Mar 14 | A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited,… Affected: 9.4.0 through 9.4.3; 7.2.0 through 7.2.1 |
| CVE-2022-43950 | 4.7 | May 3 | A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, … Affected: 8.7.0 before 9.4.2 |
| CVE-2022-45859 | 4.4 | May 3 | An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all… Affected: 8.7.0 through 9.1.8; 9.2.0 before 9.2.7; 9.4.0 before 9.4.2 |
Showing 10