← Database

CVE-2022-38376

MEDIUM CVSS: 6.1 Published: 2023-02-16 Modified: 2026-06-17

Description

Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.

Affected Platforms

Fortinet Fortinac

Weakness Type

CWE-79, CWE-79

References