Advisories · Technology

Fortinet FortiNAC.

Every CVE that names Fortinet FortiNAC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-33300 CVE record

CVSS 4.8 Medium

Command injection in Fortinet FortiNAC
- Fortinet FortiNAC
- Command injection
Not analysed yet 14 Mar 2025
CVE-2024-31488 CVE record

CVSS 6.1 Medium

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 14 May 2024
CVE-2023-26206 CVE record

CVSS 6.8 Medium

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 15 Feb 2024
CVE-2023-33299 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Deserialization of untrusted data in Fortinet FortiNAC
- Fortinet FortiNAC
- Insecure deserialization
Not analysed yet 23 Jun 2023
CVE-2023-22633 CVE record

CVSS 7.2 High

Fortinet FortiNAC: An improper permissions, privileges, and access controls vulnerability [CWE-264] in…
- Fortinet FortiNAC
- CWE-264
Not analysed yet 13 Jun 2023
CVE-2022-39946 CVE record

CVSS 7.2 High

Improper access control in Fortinet FortiNAC
- Fortinet FortiNAC
- Broken access control
Not analysed yet 13 Jun 2023
CVE-2023-22637 CVE record

CVSS 5.9 Medium

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 3 May 2023
CVE-2023-26203 CVE record

CVSS 6.1 Medium

Hard-coded credentials in Fortinet FortiNAC
- Fortinet FortiNAC
- Hard-coded credentials
Not analysed yet 3 May 2023
CVE-2022-45860 CVE record

CVSS 5.0 Medium

Weak authentication in Fortinet FortiNAC
- Fortinet FortiNAC
- Authentication bypass
Not analysed yet 3 May 2023
CVE-2022-45858 CVE record

CVSS 3.8 Low

Broken or risky cryptographic algorithm in Fortinet FortiNAC
- Fortinet FortiNAC
- Weak cryptography or TLS
Not analysed yet 3 May 2023
CVE-2022-43950 CVE record

CVSS 3.9 Low

Open redirect in Fortinet FortiNAC
- Fortinet FortiNAC
- Open redirect
Not analysed yet 3 May 2023
CVE-2022-45859 CVE record

CVSS 3.9 Low

Insufficiently protected credentials in Fortinet FortiNAC
- Fortinet FortiNAC
- Hard-coded credentials
Not analysed yet 3 May 2023
CVE-2022-43951 CVE record

CVSS 4.8 Medium

Information disclosure in Fortinet FortiNAC
- Fortinet FortiNAC
- Information disclosure
Not analysed yet 11 Apr 2023
CVE-2022-40676 CVE record

CVSS 7.1 High

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 7 Mar 2023
CVE-2022-39953 CVE record

CVSS 7.8 High

Improper privilege management in Fortinet FortiNAC
- Fortinet FortiNAC
- Privilege escalation
Not analysed yet 7 Mar 2023
CVE-2023-22638 CVE record

CVSS 6.7 Medium

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2023
CVE-2022-40677 CVE record

CVSS 7.2 High

Argument injection in Fortinet FortiNAC
- Fortinet FortiNAC
- Command injection
Not analysed yet 16 Feb 2023
CVE-2022-39952 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

External control of a file path in Fortinet FortiNAC
- Fortinet FortiNAC
- Path traversal
Not analysed yet 16 Feb 2023
CVE-2022-40675 CVE record

CVSS 6.0 Medium

Fortinet FortiNAC: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1…
- Fortinet FortiNAC
- CWE-310
Not analysed yet 16 Feb 2023
CVE-2022-39954 CVE record

CVSS 6.9 Medium

XML external entity injection in Fortinet FortiNAC
- Fortinet FortiNAC
- XML external entities (XXE)
Not analysed yet 16 Feb 2023
CVE-2022-40678 CVE record

CVSS 7.4 High

Insufficiently protected credentials in Fortinet FortiNAC
- Fortinet FortiNAC
- Hard-coded credentials
Not analysed yet 16 Feb 2023
CVE-2022-38376 CVE record

CVSS 5.8 Medium

Cross-site scripting in Fortinet FortiNAC
- Fortinet FortiNAC
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2023
CVE-2022-38375 CVE record

CVSS 8.6 High

Improper authorization in Fortinet FortiNAC
- Fortinet FortiNAC
- Broken access control
Not analysed yet 16 Feb 2023
CVE-2022-26117 CVE record

CVSS 8.8 High

An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below…
- Fortinet FortiNAC
Not analysed yet 18 Jul 2022
CVE-2022-26116 CVE record

CVSS 7.2 High

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below,…
- Fortinet FortiNAC
Not analysed yet 11 May 2022
CVE-2021-43065 CVE record

CVSS 7.8 High

Fortinet FortiNAC: A incorrect permission assignment for critical resource in Fortinet FortiNAC version…
- Fortinet FortiNAC
Not analysed yet 9 Dec 2021
CVE-2021-41021 CVE record

CVSS 7.8 High

A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.
- Fortinet FortiNAC
Not analysed yet 8 Dec 2021
CVE-2021-24011 CVE record

CVSS 6.3 Medium

A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.
- Fortinet FortiNAC
Not analysed yet 10 May 2021
CVE-2020-12816 CVE record

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin User…
- Fortinet FortiNAC
Not analysed yet 24 Sept 2020
CVE-2019-5594 CVE record

Fortinet FortiNAC: An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")…
- Fortinet FortiNAC
Not analysed yet 23 Aug 2019