Fortinac F
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinac F (76d3bfd5-3be0-52eb-bc3a-0a76e4a87200) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21741 |
vulnerable | 2026-06-08 07:49:16.743712 |
Details available
LOW (2.2)
An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with system administrator role to redirect users to an arbitrary website via crafted CSV file.
Published: 2026-04-14T15:39:45.334Z
Updated: 2026-04-14T16:15:52.069Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48785 |
vulnerable | 2026-06-08 06:14:28.057571 |
Details available
MEDIUM (4.4)
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
Published: 2025-03-14T15:46:57.799Z
Updated: 2025-03-14T17:17:09.570Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43951 |
vulnerable | 2026-06-08 05:49:35.062943 |
Details available
MEDIUM (4.8)
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests.
Published: 2023-04-11T16:05:46.705Z
Updated: 2024-10-23T14:30:12.648Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40675 |
vulnerable | 2026-06-08 05:48:27.879603 |
Details available
MEDIUM (6)
Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.
Published: 2023-02-16T18:06:52.567Z
Updated: 2024-10-23T14:32:50.215Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39954 |
vulnerable | 2026-06-08 05:47:18.976508 |
Details available
MEDIUM (6.9)
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5, FortiNAC version 8.5.0 through 8.5.4, FortiNAC version 8.3.7 allows attacker to read arbitrary files or trigger a denial of service via specifically crafted XML documents.
Published: 2023-02-16T18:06:50.083Z
Updated: 2024-10-23T14:45:55.394Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38375 |
vulnerable | 2026-06-08 05:47:16.240403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.