Fortinet FortiNAC-F 7.2.0

CPE Details

Fortinet FortiNAC-F 7.2.0
fortinet
fortinac-f
7.2.0
2023-02-22
18h14 +00:00
2023-05-11
15h45 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*

Informations

Vendor

fortinet

Product

fortinac-f

Version

7.2.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-22633 2023-06-13 08h41 +00:00 An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation.
7.5
Haute
CVE-2023-22637 2023-05-03 21h27 +00:00 An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in License Management would permit an authenticated attacker to trigger remote code execution via crafted licenses.
9
Critique
CVE-2023-26203 2023-05-03 21h27 +00:00 A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.
7.8
Haute
CVE-2022-45860 2023-05-03 21h26 +00:00 A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success.
7.5
Haute
CVE-2022-43950 2023-05-03 21h26 +00:00 A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
4.7
Moyen
CVE-2022-45859 2023-05-03 21h26 +00:00 An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.
4.4
Moyen