Fortiwlc (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 66 known versions, newest CVE from 2025-03-17. Vendor: Fortinet.
CVEs of Fortiwlc
- CVE-2021-26087 - CVSS 6.1 (medium), 2025-03-17: An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web…
- CVE-2021-22126 - CVSS 6.7 (medium), 2025-03-17: A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may…
- CVE-2021-32584 - CVSS 5.3 (medium), 2025-03-17: An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below,…
- CVE-2022-23439 - CVSS 6.1 (medium), 2025-01-22: A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…
- CVE-2021-26093 - CVSS 7.3 (high), 2024-12-19: An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash…
- CVE-2021-42758 - CVSS 8.8 (high), 2021-12-08: An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute…
- CVE-2020-9288 - CVSS 5.4 (medium), 2020-06-22: An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack…
- CVE-2017-17539 - CVSS 9.8 (critical), 2018-05-08: The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell.
- CVE-2017-17540 - CVSS 9.8 (critical), 2018-05-08: The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell.
- CVE-2017-7341 - CVSS 7.2 (high), 2017-10-26: An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management…
- CVE-2017-7335 - CVSS 5.4 (medium), 2017-10-26: A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2…
- CVE-2016-8491 - CVSS 9.1 (critical), 2017-02-01: The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.
- CVE-2016-7561 - CVSS 7.2 (high), 2016-10-05: Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading…
- CVE-2016-7560 - CVSS 9.8 (critical), 2016-10-05: The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows…
