« Volver al listado

CVE-2024-31488

Estado: AnalizadaCrítica (9)—

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Fortinet — Fortinac

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-31488",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-31488",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-17T04:00:23.122383Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@fortinet.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@fortinet.com",
      "affectedData": [
        {
          "vendor": "Fortinet",
          "product": "FortiNAC",
          "versions": [
            {
              "status": "affected",
              "version": "9.4.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.3"
            },
            {
              "status": "affected",
              "version": "9.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.2.8"
            },
            {
              "status": "affected",
              "version": "9.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.1.10"
            },
            {
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver",
              "lessThanOrEqual": "8.8.11"
            },
            {
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver",
              "lessThanOrEqual": "8.7.6"
            },
            {
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.2"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "9.4.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.4.3"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "9.2.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.2.8"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "9.1.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.1..10"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "8.8.0",
              "versionType": "custom",
              "lessThanOrEqual": "8.8.11"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "8.7.0",
              "versionType": "custom",
              "lessThanOrEqual": "8.7.6"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"
          ],
          "vendor": "fortinet",
          "product": "fortinac",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.0",
              "versionType": "custom",
              "lessThanOrEqual": "7.2.2"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-05-14T17:17:23.733",
  "references": [
    {
      "url": "https://fortiguard.com/psirt/FG-IR-24-040",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@fortinet.com"
    },
    {
      "url": "https://fortiguard.com/psirt/FG-IR-24-040",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@fortinet.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."
    },
    {
      "lang": "es",
      "value": "Una neutralización inadecuada de entradas durante la vulnerabilidad de generación de páginas web [CWE-79] en FortiNAC versión 9.4.0 a 9.4.4, 9.2.0 a 9.2.8, 9.1.0 a 9.1.10, 8.8.0 a 8.8.11, 8.7.0 a 8.7.6, 7.2.0 a 7.2.3 pueden permitir que un atacante remoto autenticado realice un ataque de Cross Site Scripting (XSS) almacenado y reflejado a través de solicitudes HTTP manipuladas."
    }
  ],
  "lastModified": "2026-06-17T07:28:32.000",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E178BCE-6212-4C9F-BDED-090DA849F9C1",
              "versionEndExcluding": "7.2.4",
              "versionStartIncluding": "7.2.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13B96979-AB7A-426A-A6D8-16D6D2295233",
              "versionEndExcluding": "9.4.5",
              "versionStartIncluding": "8.7.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@fortinet.com"
}