Vulnerabilities > Forescout > Secureconnector

DATE CVE VULNERABILITY TITLE RISK
2024-02-08 CVE-2024-22795 Improper Privilege Management vulnerability in Forescout Secureconnector 11.3.06.0063
Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component.
local
high complexity
forescout CWE-269
7.0
2023-09-03 CVE-2023-39374 Uncontrolled Search Path Element vulnerability in Forescout Secureconnector 11.2
ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
local
low complexity
forescout CWE-427
7.8
2021-12-29 CVE-2021-36724 Classic Buffer Overflow vulnerability in Forescout Secureconnector 11.0.4.1024
ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath.
local
low complexity
forescout CWE-120
2.1
2018-07-13 CVE-2016-9486 Permissions, Privileges, and Access Controls vulnerability in Forescout Secureconnector
On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent.
local
low complexity
forescout CWE-264
7.2
2018-07-13 CVE-2016-9485 Permissions, Privileges, and Access Controls vulnerability in Forescout Secureconnector
On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent.
local
low complexity
forescout CWE-264
7.2