Cross-Site Scripting Vulnerability in Fortinet FortiNAC by Fortinet
CVE-2022-40676

7.1HIGH

Key Information:

Vendor

Fortinet
Status
Fortinac
Vendor
CVE Published:
7 March 2023

What is CVE-2022-40676?

An improper neutralization of input during web page generation in Fortinet FortiNAC allows attackers to exploit the system through crafted HTTP requests. This vulnerability can lead to the execution of unauthorized code or commands, posing a significant risk to the integrity and confidentiality of the affected systems.

Affected Version(s)

FortiNAC 9.4.0

FortiNAC 9.2.0 <= 9.2.5

FortiNAC 9.1.0 <= 9.1.8

References

https://fortiguard.com/psirt/FG-IR-22-281

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.