Skip to content
Sign in
6.8 Medium

CVE-2023-26206 An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 -…

Description

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs.

Affected products and versions

Product Affected versions Fixed in
FortiNAC 9.4 9.4.0 → 9.4.2 No fix stated
FortiNAC 9.2 9.2.0 → 9.2.8 No fix stated
FortiNAC 9.1 9.1.0 → 9.1.10 No fix stated
FortiNAC 7.2.0 No fix stated

Other CVEs of FortiNAC

The 23 CVEs of FortiNAC →
CVE-2023-33300 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and… 4.8 Medium CVE-2024-31488 An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through… 6.1 Medium CVE-2023-33299 A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier… 9.6 Critical CVE-2023-22633 An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and… 7.2 High
Track this CVE