Fortinet

Fortinac

30 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-39952

  • EPSS 93.1%
  • Published 16.02.2023 19:15:13
  • Last modified 21.11.2024 07:18:33

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to...

6.1

CVE-2022-38376

  • EPSS 0.57%
  • Published 16.02.2023 19:15:12
  • Last modified 21.11.2024 07:16:21

Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.

9.8

CVE-2022-38375

  • EPSS 0.22%
  • Published 16.02.2023 19:15:12
  • Last modified 21.11.2024 07:16:20

An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.

8.8

CVE-2022-26117

  • EPSS 0.46%
  • Published 18.07.2022 18:15:09
  • Last modified 21.11.2024 06:53:27

An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attack...

8.8

CVE-2022-26116

  • EPSS 0.62%
  • Published 11.05.2022 08:15:06
  • Last modified 21.11.2024 06:53:27

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below...

7.8

CVE-2021-43065

Exploit
  • EPSS 0.15%
  • Published 09.12.2021 10:15:11
  • Last modified 21.11.2024 06:28:37

A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.

7.2

CVE-2021-41021

  • EPSS 0.04%
  • Published 08.12.2021 18:15:18
  • Last modified 21.11.2024 06:25:16

A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.

9

CVE-2021-24011

  • EPSS 0.37%
  • Published 10.05.2021 12:15:07
  • Last modified 21.11.2024 05:52:12

A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.

6.1

CVE-2020-12816

  • EPSS 0.37%
  • Published 24.09.2020 15:15:13
  • Last modified 21.11.2024 05:00:19

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.

6.1

CVE-2019-5594

  • EPSS 0.59%
  • Published 23.08.2019 21:15:12
  • Last modified 21.11.2024 04:45:11

An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webU...