CVE-2022-43950 PUBLISHED CVSS 4.699999809265137 MEDIUM

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

EPSS 0.23% · 45.2th percentile

Risk Scores

CVSS v3.1
4.699999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
0.23%
45.2th percentile

Affected Products

VendorProductVersions
fortinetfortinac8.7.0, 8.7.0
fortinetfortinac-f7.2.0, 7.2.0
FortinetFortiNAC9.1.0, 8.8.0, 8.7.0

Timeline

References

Open in Interactive Console →