Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-21741 1 Fortinet 1 Fortinac-f 2026-04-20 2.2 Low
An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with system administrator role to redirect users to an arbitrary website via crafted CSV file.
CVE-2021-24011 1 Fortinet 1 Fortinac 2024-11-21 6.3 Medium
A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.
CVE-2020-12816 1 Fortinet 1 Fortinac 2024-11-21 6.1 Medium
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
CVE-2019-5594 1 Fortinet 1 Fortinac 2024-11-21 N/A
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.