CVE-2024-31488 - Vulnerability Details - OpenCVE

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00476.

Exploitation None

Automatable No

Technical Impact Total

Vendors	Products
Fortinet	Fortinac

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::

No data.

No data.

References

Link	Providers
https://fortiguard.com/psirt/FG-IR-24-040

History

Tue, 16 Dec 2025 22:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'No', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}`

Tue, 16 Dec 2025 17:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'No', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 21 Jan 2025 22:15:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:fortinet:fortinac::::::::

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2024-05-14T16:19:08.151Z

Updated: 2025-12-16T18:13:18.228Z

Reserved: 2024-04-04T12:52:41.585Z

Link: CVE-2024-31488

Vulnrichment

Updated: 2024-08-02T01:52:57.296Z

NVD

Status : Analyzed

Published: 2024-05-14T17:17:23.733

Modified: 2025-01-21T21:47:47.183

Link: CVE-2024-31488

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-31488", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2024-04-04T12:52:41.585Z", "datePublished": "2024-05-14T16:19:08.151Z", "dateUpdated": "2025-12-16T18:13:18.228Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiNAC", "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "9.4.0", "lessThanOrEqual": "9.4.3", "status": "affected"}, {"versionType": "semver", "version": "9.2.0", "lessThanOrEqual": "9.2.8", "status": "affected"}, {"versionType": "semver", "version": "9.1.0", "lessThanOrEqual": "9.1.10", "status": "affected"}, {"versionType": "semver", "version": "8.8.0", "lessThanOrEqual": "8.8.11", "status": "affected"}, {"versionType": "semver", "version": "8.7.0", "lessThanOrEqual": "8.7.6", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.2", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-05-14T16:19:08.151Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "Execute unauthorized code or commands", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiNAC version 9.4.5 or above \nPlease upgrade to FortiNAC version 7.4.0 or above \nPlease upgrade to FortiNAC version 7.2.4 or above \n"}], "references": [{"name": "https://fortiguard.com/psirt/FG-IR-24-040", "url": "https://fortiguard.com/psirt/FG-IR-24-040"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-31488", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-17T04:00:23.122383Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.4.0", "versionType": "custom", "lessThanOrEqual": "9.4.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.2.0", "versionType": "custom", "lessThanOrEqual": "9.2.8"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.1.0", "versionType": "custom", "lessThanOrEqual": "9.1..10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.8.0", "versionType": "custom", "lessThanOrEqual": "8.8.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.7.0", "versionType": "custom", "lessThanOrEqual": "8.7.6"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.2"}], "defaultStatus": "unknown"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-16T18:13:18.228Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:52:57.296Z"}, "title": "CVE Program Container", "references": [{"name": "https://fortiguard.com/psirt/FG-IR-24-040", "url": "https://fortiguard.com/psirt/FG-IR-24-040", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-24-040", "name": "https://fortiguard.com/psirt/FG-IR-24-040", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:52:57.296Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-31488", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "No"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2024-05-17T04:00:23.122383Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.4.0", "versionType": "custom", "lessThanOrEqual": "9.4.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.2.0", "versionType": "custom", "lessThanOrEqual": "9.2.8"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.1.0", "versionType": "custom", "lessThanOrEqual": "9.1..10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.8.0", "versionType": "custom", "lessThanOrEqual": "8.8.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.7.0", "versionType": "custom", "lessThanOrEqual": "8.7.6"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-17T12:21:19.444Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Fortinet", "product": "FortiNAC", "versions": [{"status": "affected", "version": "9.4.0", "versionType": "semver", "lessThanOrEqual": "9.4.3"}, {"status": "affected", "version": "9.2.0", "versionType": "semver", "lessThanOrEqual": "9.2.8"}, {"status": "affected", "version": "9.1.0", "versionType": "semver", "lessThanOrEqual": "9.1.10"}, {"status": "affected", "version": "8.8.0", "versionType": "semver", "lessThanOrEqual": "8.8.11"}, {"status": "affected", "version": "8.7.0", "versionType": "semver", "lessThanOrEqual": "8.7.6"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.2"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiNAC version 9.4.5 or above \nPlease upgrade to FortiNAC version 7.4.0 or above \nPlease upgrade to FortiNAC version 7.2.4 or above \n"}], "references": [{"url": "https://fortiguard.com/psirt/FG-IR-24-040", "name": "https://fortiguard.com/psirt/FG-IR-24-040"}], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "Execute unauthorized code or commands"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-05-14T16:19:08.151Z"}}}, "cveMetadata": {"cveId": "CVE-2024-31488", "state": "PUBLISHED", "dateUpdated": "2025-12-16T17:23:09.279Z", "dateReserved": "2024-04-04T12:52:41.585Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2024-05-14T16:19:08.151Z", "assignerShortName": "fortinet"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E178BCE-6212-4C9F-BDED-090DA849F9C1", "versionEndExcluding": "7.2.4", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "13B96979-AB7A-426A-A6D8-16D6D2295233", "versionEndExcluding": "9.4.5", "versionStartIncluding": "8.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}, {"lang": "es", "value": "Una neutralizaci\u00f3n inadecuada de entradas durante la vulnerabilidad de generaci\u00f3n de p\u00e1ginas web [CWE-79] en FortiNAC versi\u00f3n 9.4.0 a 9.4.4, 9.2.0 a 9.2.8, 9.1.0 a 9.1.10, 8.8.0 a 8.8.11, 8.7.0 a 8.7.6, 7.2.0 a 7.2.3 pueden permitir que un atacante remoto autenticado realice un ataque de Cross Site Scripting (XSS) almacenado y reflejado a trav\u00e9s de solicitudes HTTP manipuladas."}], "id": "CVE-2024-31488", "lastModified": "2025-01-21T21:47:47.183", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-05-14T17:17:23.733", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-24-040"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-24-040"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}