Fortinet FortiNAC vulnerabilities

CVEs per yearBy the year they were published

1. 202320
2. 20242
3. 20251

Newest CVEs

• CVE-2023-33300

  A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker…

  Fortinet · FortiNAC

  Medium4.8
• CVE-2024-31488

  An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0…

  Fortinet · FortiNAC

  Medium6.1
• CVE-2023-26206

  An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and…

  Fortinet · FortiNAC

  Medium6.8
• CVE-2023-33299

  A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute…

  Fortinet · FortiNAC

  Critical9.6
• CVE-2023-22633

  An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and…

  Fortinet · FortiNAC

  High7.2
• CVE-2022-39946

  An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions,…

  Fortinet · FortiNAC

  High7.2
• CVE-2023-22637

  An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version…

  Fortinet · FortiNAC

  Medium5.9
• CVE-2023-26203

  A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8…

  Fortinet · FortiNAC

  Medium6.1
• CVE-2022-45860

  A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all…

  Fortinet · FortiNAC

  Medium5.0
• CVE-2022-45858

  A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all…

  Fortinet · FortiNAC

  Low3.8