Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortinac
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41021 1 Fortinet 1 Fortinac 2022-07-12 7.2 HIGH 6.7 MEDIUM
A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.
CVE-2020-12816 1 Fortinet 1 Fortinac 2020-09-30 4.3 MEDIUM 6.1 MEDIUM
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
CVE-2019-5594 1 Fortinet 1 Fortinac 2019-08-26 4.3 MEDIUM 6.1 MEDIUM
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.