Skip to content
OpenAdvisories
Medium · 5.8 CVE-2022-38376 EUVD-2022-40962GHSA-f2cw-h779-q8jh

Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC…

Published Feb 16, 2023 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiNAC Category: Network devices

Description

Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.

Affected products

VendorProductAffectedFixed
Fortinet FortiNAC 9.4.0 – ≤ 9.4.1, 9.2.0 – ≤ 9.2.7, 9.1.0 – ≤ 9.1.8, 8.8.0 – ≤ 8.8.11, 8.7.0 – ≤ 8.7.6, 8.6.0 – ≤ 8.6.5, 8.5.0 – ≤ 8.5.4, 8.3.7 —

References