Fortinet

Fortisiem

26 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-25256

Media report
  • EPSS 41.78%
  • Published 12.08.2025 18:59:14
  • Last modified 15.08.2025 18:15:27

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 all...

8.8

CVE-2023-40714

  • EPSS 0.31%
  • Published 02.04.2025 08:15:13
  • Last modified 15.07.2025 19:41:08

A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements

8.1

CVE-2019-17659

  • EPSS 0.11%
  • Published 17.03.2025 13:06:07
  • Last modified 15.07.2025 16:48:48

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from anot...

3.8

CVE-2024-55592

  • EPSS 0.02%
  • Published 11.03.2025 14:54:29
  • Last modified 25.07.2025 14:25:49

An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 al...

8.1

CVE-2023-40723

  • EPSS 0.08%
  • Published 11.03.2025 14:54:28
  • Last modified 22.07.2025 21:21:00

An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through ...

5.4

CVE-2024-27780

  • EPSS 0.02%
  • Published 11.02.2025 17:15:21
  • Last modified 16.07.2025 14:54:28

Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a c...

6.5

CVE-2024-52969

  • EPSS 0.09%
  • Published 14.01.2025 14:15:34
  • Last modified 03.02.2025 22:01:44

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, versi...

7.5

CVE-2024-46667

  • EPSS 0.17%
  • Published 14.01.2025 14:15:31
  • Last modified 16.07.2025 13:16:19

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted co...

9.8

CVE-2024-23109

  • EPSS 5.01%
  • Published 05.02.2024 14:15:59
  • Last modified 21.11.2024 08:56:56

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.1.0 through 7.1.1 and 7.0.0 through 7.0.2 and 6.7.0 through 6.7.8 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.2 and 6.4.0 ...

9.8

CVE-2024-23108

  • EPSS 88.68%
  • Published 05.02.2024 14:15:57
  • Last modified 21.11.2024 08:56:56

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 7.1.0 through 7.1.1 and 7.0.0 through 7.0.2 and 6.7.0 through 6.7.8 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.2 and 6.4.0 ...