Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortisiem
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-36553 1 Fortinet 1 Fortisiem 2023-11-20 N/A 9.8 CRITICAL
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
CVE-2019-16153 1 Fortinet 1 Fortisiem 2020-01-27 7.5 HIGH 9.8 CRITICAL
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.