| Package | Affected versions | Patched versions |
|---|---|---|
| fortinac | = 8.5.0≥ 8.3.0, ≤ 8.3.6 |
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free