[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXzMx0oE3vIteohnQiaSI5uuoO81QB13BAfnEDjdTZwI":3,"g5a-ex:fortinet\u002Ffortinac@*":323,"g5a-family:fortinet\u002Ffortinac":325},{"success":4,"data":5},true,{"product":6,"versions":168,"topVulnerabilitiesByEpss":243,"kevVulnerabilities":300,"seoMetadata":301,"meta":320},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":167},"fortinet","fortinac",74,29,0,"2024-05-14",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,153,155,157,159,161,163,165],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.2.0",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.2.1",1,{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.2",{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.3",{"version":26,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.4",{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.5",{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.6",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.7",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.8",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"7.4.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"7.6.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"7.6.1",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"8.3.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"8.3.6",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"8.3.7",8,{"version":49,"cve_count":20,"kev_count":11,"has_kev":17},"8.5.0",{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},"8.5.1",{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},"8.5.2",{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},"8.5.3",{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},"8.5.4",{"version":59,"cve_count":16,"kev_count":11,"has_kev":17},"8.6.0",{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.1",{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.2",{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.3",{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.4",{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},"8.6.5",{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.0",{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.1",{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.2",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.3",{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.4",{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.5",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"8.7.6",{"version":85,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.0",{"version":87,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.1",{"version":89,"cve_count":11,"kev_count":11,"has_kev":17},"8.8.10",{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},"8.8.11",{"version":93,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.2",{"version":95,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.3",{"version":97,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.4",{"version":99,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.5",{"version":101,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.6",{"version":103,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.7",{"version":105,"cve_count":20,"kev_count":11,"has_kev":17},"8.8.8",{"version":107,"cve_count":11,"kev_count":11,"has_kev":17},"8.8.9",{"version":109,"cve_count":20,"kev_count":11,"has_kev":17},"9.1.0",{"version":111,"cve_count":20,"kev_count":11,"has_kev":17},"9.1.1",{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.10",{"version":115,"cve_count":20,"kev_count":11,"has_kev":17},"9.1.2",{"version":117,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.3",{"version":119,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.4",{"version":121,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.5",{"version":123,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.6",{"version":125,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.7",{"version":127,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.8",{"version":129,"cve_count":11,"kev_count":11,"has_kev":17},"9.1.9",{"version":131,"cve_count":20,"kev_count":11,"has_kev":17},"9.2.0",{"version":133,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.1",{"version":135,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.2",{"version":137,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.3",{"version":139,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.4",{"version":141,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.5",{"version":143,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.6",{"version":145,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.7",{"version":147,"cve_count":11,"kev_count":11,"has_kev":17},"9.2.8",{"version":149,"cve_count":47,"kev_count":11,"has_kev":17},"9.4.0",{"version":151,"cve_count":152,"kev_count":11,"has_kev":17},"9.4.1",5,{"version":154,"cve_count":16,"kev_count":11,"has_kev":17},"9.4.2",{"version":156,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.3",{"version":158,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.4",{"version":160,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.5",{"version":162,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.6",{"version":164,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.7",{"version":166,"cve_count":11,"kev_count":11,"has_kev":17},"9.4.8","Fortinac by Fortinet is a technology product with 74 tracked versions and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":11,"kev_count":11,"has_kev":17},{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},{"version":26,"cve_count":11,"kev_count":11,"has_kev":17},{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":20,"kev_count":11,"has_kev":17},{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},{"version":57,"cve_count":16,"kev_count":11,"has_kev":17},{"version":59,"cve_count":16,"kev_count":11,"has_kev":17},{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},{"version":85,"cve_count":20,"kev_count":11,"has_kev":17},{"version":87,"cve_count":20,"kev_count":11,"has_kev":17},{"version":89,"cve_count":11,"kev_count":11,"has_kev":17},{"version":91,"cve_count":11,"kev_count":11,"has_kev":17},{"version":93,"cve_count":20,"kev_count":11,"has_kev":17},{"version":95,"cve_count":20,"kev_count":11,"has_kev":17},{"version":97,"cve_count":20,"kev_count":11,"has_kev":17},{"version":99,"cve_count":20,"kev_count":11,"has_kev":17},{"version":101,"cve_count":20,"kev_count":11,"has_kev":17},{"version":103,"cve_count":20,"kev_count":11,"has_kev":17},{"version":105,"cve_count":20,"kev_count":11,"has_kev":17},{"version":107,"cve_count":11,"kev_count":11,"has_kev":17},{"version":109,"cve_count":20,"kev_count":11,"has_kev":17},{"version":111,"cve_count":20,"kev_count":11,"has_kev":17},{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},{"version":115,"cve_count":20,"kev_count":11,"has_kev":17},{"version":117,"cve_count":11,"kev_count":11,"has_kev":17},{"version":119,"cve_count":11,"kev_count":11,"has_kev":17},{"version":121,"cve_count":11,"kev_count":11,"has_kev":17},{"version":123,"cve_count":11,"kev_count":11,"has_kev":17},{"version":125,"cve_count":11,"kev_count":11,"has_kev":17},{"version":127,"cve_count":11,"kev_count":11,"has_kev":17},{"version":129,"cve_count":11,"kev_count":11,"has_kev":17},{"version":131,"cve_count":20,"kev_count":11,"has_kev":17},{"version":133,"cve_count":11,"kev_count":11,"has_kev":17},{"version":135,"cve_count":11,"kev_count":11,"has_kev":17},{"version":137,"cve_count":11,"kev_count":11,"has_kev":17},{"version":139,"cve_count":11,"kev_count":11,"has_kev":17},{"version":141,"cve_count":11,"kev_count":11,"has_kev":17},{"version":143,"cve_count":11,"kev_count":11,"has_kev":17},{"version":145,"cve_count":11,"kev_count":11,"has_kev":17},{"version":147,"cve_count":11,"kev_count":11,"has_kev":17},{"version":149,"cve_count":47,"kev_count":11,"has_kev":17},{"version":151,"cve_count":152,"kev_count":11,"has_kev":17},{"version":154,"cve_count":16,"kev_count":11,"has_kev":17},{"version":156,"cve_count":11,"kev_count":11,"has_kev":17},{"version":158,"cve_count":11,"kev_count":11,"has_kev":17},{"version":160,"cve_count":11,"kev_count":11,"has_kev":17},{"version":162,"cve_count":11,"kev_count":11,"has_kev":17},{"version":164,"cve_count":11,"kev_count":11,"has_kev":17},{"version":166,"cve_count":11,"kev_count":11,"has_kev":17},[244,252,257,264,268,273,280,285,291,295],{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":249,"severity":250,"isKev":17,"epssScore":251},"CVE-2022-39952","A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.","2023-02-16",9.8,"v3.1","Critical",0.99794,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":248,"cvssVersion":249,"severity":250,"isKev":17,"epssScore":256},"CVE-2023-33299","A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed.","2023-06-23",0.24296,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":249,"severity":262,"isKev":17,"epssScore":263},"CVE-2020-12816","An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.","2020-09-24",6.1,"Medium",0.01154,{"cveId":265,"description":266,"publishedDate":247,"cvssScore":248,"cvssVersion":249,"severity":250,"isKev":17,"epssScore":267},"CVE-2022-38375","An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.",0.01079,{"cveId":269,"description":270,"publishedDate":12,"cvssScore":271,"cvssVersion":249,"severity":262,"isKev":17,"epssScore":272},"CVE-2024-31488","An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.",6.8,0.01014,{"cveId":274,"description":275,"publishedDate":276,"cvssScore":277,"cvssVersion":249,"severity":278,"isKev":17,"epssScore":279},"CVE-2022-26117","An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.","2022-07-18",8.8,"High",0.00977,{"cveId":281,"description":282,"publishedDate":283,"cvssScore":277,"cvssVersion":249,"severity":278,"isKev":17,"epssScore":284},"CVE-2022-26116","Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.","2022-05-11",0.00833,{"cveId":286,"description":287,"publishedDate":288,"cvssScore":289,"cvssVersion":249,"severity":278,"isKev":17,"epssScore":290},"CVE-2021-24011","A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges.","2021-05-10",7.2,0.0081,{"cveId":292,"description":293,"publishedDate":247,"cvssScore":277,"cvssVersion":249,"severity":278,"isKev":17,"epssScore":294},"CVE-2022-40677","A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted input parameters.",0.00772,{"cveId":296,"description":297,"publishedDate":298,"cvssScore":289,"cvssVersion":249,"severity":278,"isKev":17,"epssScore":299},"CVE-2022-39946","An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions, 8.6 all versions, 8.5 all versions may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp calls via crafted HTTP requests.","2023-06-13",0.00717,[],{"title":302,"metaDescription":303,"keywords":304,"structuredData":305},"Fortinac by Fortinet - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Fortinac by Fortinet covering 74 versions with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortinac vulnerabilities, Fortinac security, Fortinac CVE, Fortinet Fortinac, Fortinac threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":306,"@type":307,"name":308,"description":303,"url":309,"manufacturer":310,"applicationCategory":314,"softwareVersion":315,"mainEntity":316},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortinac","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortinac",{"@type":311,"name":312,"url":313},"Organization","Fortinet","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffortinet","Security Software","74 versions tracked",{"@type":317,"name":318,"description":319,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortinac Security Vulnerabilities","Security vulnerabilities affecting Fortinac by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":321,"apiVersion":322},"2026-10-28T14:20:14.436Z","3.0",{"rows":324,"total":11,"capped":17,"failed":11},[],[]]