Login Request a demo
FO
Product
FortiWLC
by Fortinet · last CVE Mar 17, 2025
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 3Medium 7Low 0
Severity
All severities14Critical4High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FortiWLC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-22126
6.7
0%
Mar 17
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local,…
Affected: 8.5.0 through 8.5.2; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2; 8.3.2 through 8.3.3; 8.2.6 through 8.2.7
CVE-2021-26093
6.5
0%
Dec 19
An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access…
Affected: 8.6.0; 8.5.0 through 8.5.3; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2; 8.3.0 through 8.3.3; 8.2.4 through 8.2.7; +2 more
CVE-2021-26087
6.1
0%
Mar 17
An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow…
Affected: 8.6.0; 8.5.0 through 8.5.3; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2; 8.3.3
CVE-2022-23439
6.1
0%
Jan 22
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host`…
Affected: 8.6.0 through 8.6.7; 8.5.0 through 8.5.5; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2
CVE-2020-9288
5.4
1%
Jun 22
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS…
Affected: through 8.5.1
CVE-2017-7335
5.4
1%
Oct 26
A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows…
Affected: 6.1-2; 6.1-4; 6.1-5; 7.0-7; 7.0-8; 7.0-9; +7 more
CVE-2021-32584
5.3
1%
Mar 17
An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4,…
Affected: 8.6.0; 8.5.0 through 8.5.3; 8.4.4 through 8.4.8; 8.4.0 through 8.4.2; 8.3.0 through 8.3.3; 8.2.4 through 8.2.7; +1 more
Showing 7