| CVE-2023-33300 |
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and…
|
4.8
Medium
|
Mar 14, 2025 |
| CVE-2024-31488 |
An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through…
|
6.1
Medium
|
May 14, 2024 |
| CVE-2023-26206 |
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 -…
|
6.8
Medium
|
Feb 15, 2024 |
| CVE-2023-33299 |
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier…
|
9.6
Critical
|
Jun 23, 2023 |
| CVE-2023-22633 |
An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and…
|
7.2
High
|
Jun 13, 2023 |
| CVE-2022-39946 |
An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all…
|
7.2
High
|
Jun 13, 2023 |
| CVE-2023-22637 |
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in…
|
5.9
Medium
|
May 3, 2023 |
| CVE-2023-26203 |
A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below,…
|
6.1
Medium
|
May 3, 2023 |
| CVE-2022-45860 |
A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all…
|
5.0
Medium
|
May 3, 2023 |
| CVE-2022-45858 |
A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0…
|
3.8
Low
|
May 3, 2023 |
| CVE-2022-43950 |
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC…
|
3.9
Low
|
May 3, 2023 |
| CVE-2022-45859 |
An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and…
|
3.9
Low
|
May 3, 2023 |
| CVE-2022-43951 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6…
|
4.8
Medium
|
Apr 11, 2023 |
| CVE-2022-40676 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions…
|
7.1
High
|
Mar 7, 2023 |
| CVE-2022-39953 |
A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through…
|
7.8
High
|
Mar 7, 2023 |
| CVE-2023-22638 |
Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and…
|
6.7
Medium
|
Feb 16, 2023 |
| CVE-2022-40677 |
A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions…
|
7.2
High
|
Feb 16, 2023 |
| CVE-2022-39952 |
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7,…
|
9.8
Critical
|
Feb 16, 2023 |
| CVE-2022-40675 |
Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8,…
|
6.0
Medium
|
Feb 16, 2023 |
| CVE-2022-39954 |
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC…
|
6.9
Medium
|
Feb 16, 2023 |
| CVE-2022-40678 |
An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7,…
|
7.4
High
|
Feb 16, 2023 |
| CVE-2022-38376 |
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79]…
|
5.8
Medium
|
Feb 16, 2023 |
| CVE-2022-38375 |
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6…
|
8.6
High
|
Feb 16, 2023 |