Tracker / CVE-2022-38376
CVE-2022-38376
Medium 6.1
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.
Affected products and versions
| fortinet | fortinac |
|---|---|
| fortinet | fortinac · 8.5.0 → 8.5.4 |
| fortinet | fortinac · 8.6.0 → 9.4.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.