Fortinet Fortinac vulnerabilities
6 known vulnerabilities affecting fortinet/fortinet_fortinac.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2022-26117HIGHCVSS 8.8vFortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below.2022-07-18
CVE-2022-26117 [HIGH] CWE-521 CVE-2022-26117: An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below,
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
cvelistv5nvd
CVE-2022-26116HIGHCVSS 8.8vFortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below.2022-05-11
CVE-2022-26116 [HIGH] CWE-89 CVE-2022-26116: Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerab
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via speci
cvelistv5nvd
CVE-2021-43065HIGHCVSS 7.8vFortiNAC 9.2.0, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.02021-12-09
CVE-2021-43065 [HIGH] CWE-732 CVE-2021-43065: A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
cvelistv5nvd
CVE-2021-41021MEDIUMCVSS 6.7vFortiNAC 9.1.2, 9.1.1, 9.1.0, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.02021-12-08
CVE-2021-41021 [HIGH] CVE-2021-41021: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may al
A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.
cvelistv5nvd
CVE-2021-24011HIGHCVSS 7.2vFortiNAC 8.8.1 and below2021-05-10
CVE-2021-24011 [MEDIUM] CVE-2021-24011: A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to esca
A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.
cvelistv5nvd
CVE-2020-12816MEDIUMCVSS 6.1vFortiNAC before 8.7.22020-09-24
CVE-2020-12816 [MEDIUM] CWE-79 CVE-2020-12816: An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authen
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
cvelistv5nvd