Not rated
CVE-2020-12816 An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker…
Description
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiNAC | Versions not published |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of Fortinet FortiNAC
The 6 CVEs of Fortinet FortiNAC →
CVE-2022-26117
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below,…
8.8
High
CVE-2022-26116
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in…
7.2
High
CVE-2021-43065
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below,…
7.8
High
CVE-2021-41021
A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to…
7.8
High