FO
Product
Fortinac
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 10Low 0
Watch
Add Fortinac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33299 | 9.8 | Jun 23 | A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or… Affected: 8.5.0 through 8.5.4; 8.6.0 through 8.6.5; 8.7.0 through 8.7.6; 8.8.0 through 8.8.11; 9.1.0 through 9.1.9; 9.2.0 through 9.2.7; +6 more |
| CVE-2022-39952 | 9.8 | Feb 16 | A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through… Affected: 8.3.7 through 8.8.9; 9.1.0 before 9.1.8; 9.2.0 before 9.2.6; 9.4.0 before 9.4.1 |
| CVE-2022-38375 | 9.8 | Feb 16 | An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative… Affected: 9.2.0 before 9.2.7; 9.4.0 before 9.4.2 |
| CVE-2022-39954 | 9.1 | Feb 16 | An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through… Affected: 8.3.7 through 9.2.7; 9.4.0 before 9.4.2 |
| CVE-2024-31488 | 9.0 | May 14 | An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0… Affected: 7.2.0 before 7.2.4; 8.7.0 before 9.4.5 |
| CVE-2023-22637 | 9.0 | May 3 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2… Affected: 8.7.0 before 9.4.3 |
Showing 6