Forescout Secureconnector — known CVE vulnerabilities

Every CVE whose affected-product data names Forescout Secureconnector, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2025-4660 — CVSS 9.8 (critical): A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named…
• CVE-2016-9486 — CVSS 7.8 (high): On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable…
• CVE-2023-39374 — CVSS 7.8 (high): ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element
• CVE-2016-9485 — CVSS 7.8 (high): On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable…
• CVE-2024-9950 — CVSS 7.8 (high): A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to…
• CVE-2024-22795 — CVSS 7.0 (high): Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the…
• CVE-2024-9949 — CVSS 6.1 (medium): Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause…
• CVE-2021-36724 — CVSS 6.1 (medium): ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector…