Vulnerabilities (CVE)

Filtered by vendor Fortinet Subscribe
Filtered by product Fortisiem
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26119 1 Fortinet 1 Fortisiem 2023-08-08 N/A 7.8 HIGH
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
CVE-2021-41022 2 Fortinet, Microsoft 2 Fortisiem, Windows 2021-11-04 4.6 MEDIUM 7.8 HIGH
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts
CVE-2019-17653 1 Fortinet 1 Fortisiem 2020-03-18 6.8 MEDIUM 8.8 HIGH
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.
CVE-2018-13378 1 Fortinet 1 Fortisiem 2019-04-17 4.0 MEDIUM 7.2 HIGH
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.