This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2023-22637 | BDVDB-2026-201422 Detail

FortinetFortiNAC

Description#

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in License Management would permit an authenticated attacker to trigger remote code execution via crafted licenses.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.