Fortinet Fortinac (Fortinet) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-07-18. Vendor: Fortinet.

CVEs of Fortinet Fortinac

• CVE-2022-26117 - CVSS 8.8 (high), 2022-07-18: An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and…
• CVE-2022-26116 - CVSS 8.8 (high), 2022-05-11: Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2…
• CVE-2021-43065 - CVSS 7.8 (high), 2021-12-09: A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker…
• CVE-2021-41021 - CVSS 7.8 (high), 2021-12-08: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via…
• CVE-2021-24011 - CVSS 7.2 (high), 2021-05-10: A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.
• CVE-2020-12816 - CVSS 6.1 (medium), 2020-09-24: An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting…