Forescout

13 CVEs across 4 Forescout products. Browse Forescout vulnerabilities, severities, and proof-of-concept exploits.

Forescout products with known CVEs

ProductCVEs
Secureconnector8
Counteract5
Eservices / Envoice1
Nac Secureconnector1
Forescout CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-4660Critical9.82025-05-13A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is acc…
CVE-2024-9950High7.82025-01-02A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary dire…
CVE-2024-9949Medium6.12024-10-23Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service i…
CVE-2024-22795High7.02024-02-08Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status…
CVE-2023-39374High7.82023-09-03 ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
CVE-2021-36724Medium6.12021-12-29ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large am…
CVE-2021-28098High7.82021-04-14An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector ru…
CVE-2016-9486High7.82018-07-13On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality…
CVE-2016-9485High7.82018-07-13On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality…
CVE-2012-49852012-12-05The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoni…
CVE-2012-49832012-12-05Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or…
CVE-2012-49822012-12-05Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites…
CVE-2012-18252012-06-11Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow re…