Show filters
29 Total Results
Displaying 21-29 of 29
Sort by:
Attacker Value
Unknown
CVE-2022-38376
Disclosure Date: February 16, 2023 (last updated November 08, 2023)
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.
0
Attacker Value
Unknown
CVE-2022-38375
Disclosure Date: February 16, 2023 (last updated November 08, 2023)
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
0
Attacker Value
Unknown
CVE-2022-26117
Disclosure Date: July 18, 2022 (last updated October 07, 2023)
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
0
Attacker Value
Unknown
CVE-2022-26116
Disclosure Date: May 11, 2022 (last updated October 07, 2023)
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.
0
Attacker Value
Unknown
CVE-2021-43065
Disclosure Date: December 09, 2021 (last updated February 23, 2025)
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
0
Attacker Value
Unknown
CVE-2021-41021
Disclosure Date: December 08, 2021 (last updated October 07, 2023)
A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.
0
Attacker Value
Unknown
CVE-2021-24011
Disclosure Date: May 10, 2021 (last updated November 28, 2024)
A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.
0
Attacker Value
Unknown
CVE-2020-12816
Disclosure Date: September 24, 2020 (last updated February 22, 2025)
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
0
Attacker Value
Unknown
CVE-2019-5594
Disclosure Date: August 23, 2019 (last updated November 27, 2024)
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
0
