<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: fortinet-fortinac</title><description>Every new CVE for fortinet-fortinac.</description><link>https://agentprime.io/</link><item><title>CVE-2023-33300: Command injection in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-33300/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-33300/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Mar 2025 15:46:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31488: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2024-31488/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31488/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 May 2024 16:19:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-26206: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-26206/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26206/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Feb 2024 13:59:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-33299: Deserialization of untrusted data in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-33299/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-33299/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. CVSS score 9.6 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jun 2023 07:46:37 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-22633: Fortinet FortiNAC: An improper permissions, privileges, and access controls vulnerability [CWE-264] in…</title><link>https://agentprime.io/advisories/CVE-2023-22633/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22633/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jun 2023 08:41:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39946: Improper access control in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-39946/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39946/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jun 2023 08:41:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22637: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-22637/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22637/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:27:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-26203: Hard-coded credentials in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-26203/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26203/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:27:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45860: Weak authentication in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-45860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45860/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:26:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45858: Broken or risky cryptographic algorithm in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-45858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45858/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:26:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-43950: Open redirect in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-43950/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-43950/</guid><description>CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:26:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45859: Insufficiently protected credentials in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-45859/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45859/</guid><description>CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 May 2023 21:26:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-43951: Information disclosure in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-43951/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-43951/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Apr 2023 16:05:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-40676: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-40676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-40676/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Mar 2023 16:04:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39953: Improper privilege management in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-39953/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39953/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Mar 2023 16:04:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22638: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2023-22638/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22638/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:07:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-40677: Argument injection in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-40677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-40677/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39952: External control of a file path in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-39952/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39952/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-40675: Fortinet FortiNAC: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1…</title><link>https://agentprime.io/advisories/CVE-2022-40675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-40675/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-39954: XML external entity injection in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-39954/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-39954/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-40678: Insufficiently protected credentials in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-40678/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-40678/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-38376: Cross-site scripting in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-38376/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-38376/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-38375: Improper authorization in Fortinet FortiNAC</title><link>https://agentprime.io/advisories/CVE-2022-38375/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-38375/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:06:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26117: An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below…</title><link>https://agentprime.io/advisories/CVE-2022-26117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26117/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 Jul 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-26116: Multiple improper neutralization of special elements used in SQL commands (&apos;SQL Injection&apos;) vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below,…</title><link>https://agentprime.io/advisories/CVE-2022-26116/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-26116/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 May 2022 07:20:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43065: Fortinet FortiNAC: A incorrect permission assignment for critical resource in Fortinet FortiNAC version…</title><link>https://agentprime.io/advisories/CVE-2021-43065/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43065/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Dec 2021 09:15:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41021: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.</title><link>https://agentprime.io/advisories/CVE-2021-41021/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41021/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Dec 2021 17:48:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-24011: A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.</title><link>https://agentprime.io/advisories/CVE-2021-24011/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-24011/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 May 2021 11:43:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-12816: An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin User…</title><link>https://agentprime.io/advisories/CVE-2020-12816/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-12816/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2020 13:29:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-5594: Fortinet FortiNAC: An Improper Neutralization of Input During Web Page Generation (&quot;Cross-site Scripting&quot;)…</title><link>https://agentprime.io/advisories/CVE-2019-5594/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-5594/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Aug 2019 20:10:54 GMT</pubDate><category>CVE</category></item></channel></rss>