Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortinac-f
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40675 1 Fortinet 2 Fortinac, Fortinac-f 2023-08-08 N/A 7.4 HIGH
Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.
CVE-2022-38375 1 Fortinet 2 Fortinac, Fortinac-f 2023-08-08 N/A 9.8 CRITICAL
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.