Known vulnerabilities in FortiNAC - page 2

Vendor: Fortinet, Inc
Software: FortiNAC
Software CPE: cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 30
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiNAC FortiNAC is affected by 30 known vulnerabilities: 3 critical, 1 high, 10 medium, 16 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72373 - External Control of File Name or Path
CVE-2022-39952		 CWE-73 Critical
Available
No
 9.1.8, 9.2.6, 9.4.1 19.02.2023 SB2023021902
#VU72372 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-40677		 CWE-78 Low
No
No
 9.1.8, 9.2.6, 9.4.1 19.02.2023 SB2023021902
#VU72367 - Insufficiently Protected Credentials
CVE-2022-40678		 CWE-522 Low
No
No
 9.1.8, 9.2.6, 9.4.1 19.02.2023 SB2023021902
#VU64935 - Weak Password Requirements
CVE-2022-26117		 CWE-521 Low
No
No
 9.1.6, 9.2.4 05.07.2022 SB2022070529
#VU62773 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26116		 CWE-89 Medium
No
No
 9.1.6, 9.2.3 03.05.2022 SB2022050319
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58632 - Incorrect Permission Assignment for Critical Resource
CVE-2021-43065		 CWE-732 Low
No
No
 8.8.10, 9.1.4, 9.2.1 07.12.2021 SB2021120719
#VU52881 - Permissions, Privileges, and Access Controls
CVE-2021-24011		 CWE-264 Low
No
No
 8.8.2 05.05.2021 SB2021050506
#VU35592 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5594		 CWE-79 Low
No
No
 - 23.08.2019 SB2019082325
#VU19253 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 8.3.7, 8.5.1 19.07.2019 SB2019071901


Showing elements 21 - 40 out of 30