CVE-2024-31488
EUVD-2024-2936814.05.2024, 17:17
An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortinac | 7.2.0 ≤ 𝑥 < 7.2.4 |
| fortinet | fortinac | 8.7.0 ≤ 𝑥 < 9.4.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortinac | 9.4.0 ≤ 𝑥 ≤ 9.4.3 | ADP |
| fortinet | fortinac | 9.2.0 ≤ 𝑥 ≤ 9.2.8 | ADP |
| fortinet | fortinac | 9.1.0 ≤ 𝑥 ≤ 9.1..10 | ADP |
| fortinet | fortinac | 8.8.0 ≤ 𝑥 ≤ 8.8.11 | ADP |
| fortinet | fortinac | 8.7.0 ≤ 𝑥 ≤ 8.7.6 | ADP |
| fortinet | fortinac | 7.2.0 ≤ 𝑥 ≤ 7.2.2 | ADP |