Vulnetix
Try Vulnetix Request Demo
CVE-2023-22637 PUBLISHED CVSS 5.900000095367432 MEDIUM

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

EPSS 0.65% · 70.7th percentile

Risk Scores

CVSS v3.1
5.900000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
EPSS Score
0.65%
70.7th percentile

Affected Products

VendorProductVersions
FortinetFortiNAC8.8.0, 9.1.0, 9.2.0
fortinetfortinac-f7.2.0, 7.2.0, 7.2.0
fortinetfortinac8.7.0, 8.7.0, 8.7.0

Timeline

References

Open in Interactive Console →