Forescout
11 CVEs across 4 Forescout products. Browse Forescout vulnerabilities, severities, and proof-of-concept exploits.
Forescout products with known CVEs
Forescout CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-4660 | Critical | 9.8 | 2025-05-13 | A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is acc… |
CVE-2024-9950 | High | 7.8 | 2025-01-02 | A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows
unauthenticated user to modify compliance scripts due to insecure temporary dire… |
CVE-2024-9949 | Medium | 6.1 | 2024-10-23 | Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service i… |
CVE-2024-22795 | High | 7.0 | 2024-02-08 | Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status… |
CVE-2023-39374 | High | 7.8 | 2023-09-03 |
ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
|
CVE-2021-36724 | Medium | 6.1 | 2021-12-29 | ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large am… |
CVE-2021-28098 | High | 7.8 | 2021-04-14 | An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector ru… |
CVE-2016-9486 | High | 7.8 | 2018-07-13 | On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality… |
CVE-2016-9485 | High | 7.8 | 2018-07-13 | On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality… |
CVE-2012-4985 | | | 2012-12-05 | The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoni… |
CVE-2012-4983 | | | 2012-12-05 | Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or… |
CVE-2012-4982 | | | 2012-12-05 | Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites… |
CVE-2012-1825 | | | 2012-06-11 | Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow re… |