Skip to content
fr Sign in
6.1 Medium

CVE-2024-31488 An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through…

Description

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
FortiNAC 9.4 9.4.0 → 9.4.3 No fix stated
FortiNAC 9.2 9.2.0 → 9.2.8 No fix stated
FortiNAC 9.1 9.1.0 → 9.1.10 No fix stated
FortiNAC 8.8 8.8.0 → 8.8.11 No fix stated
FortiNAC 8.7 8.7.0 → 8.7.6 No fix stated
FortiNAC 7.2 7.2.0 → 7.2.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiNAC

The 23 CVEs of FortiNAC →
CVE-2023-33300 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and… 4.8 Medium CVE-2023-26206 An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 -… 6.8 Medium CVE-2023-33299 A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier… 9.6 Critical CVE-2023-22633 An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and… 7.2 High
Track this CVE