CVE-2021-41022
- EPSS 0.05%
- Veröffentlicht 02.11.2021 19:15:08
- Zuletzt bearbeitet 21.11.2024 06:25:17
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts
CVE-2019-17653
- EPSS 0.27%
- Veröffentlicht 12.03.2020 23:15:11
- Zuletzt bearbeitet 21.11.2024 04:32:42
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a...
CVE-2019-17651
- EPSS 0.2%
- Veröffentlicht 28.01.2020 01:15:11
- Zuletzt bearbeitet 21.11.2024 04:32:42
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack ...
CVE-2019-16153
- EPSS 0.41%
- Veröffentlicht 23.01.2020 17:15:11
- Zuletzt bearbeitet 21.11.2024 04:30:09
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
CVE-2019-6700
- EPSS 0.25%
- Veröffentlicht 07.01.2020 19:15:10
- Zuletzt bearbeitet 21.11.2024 04:46:58
An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
CVE-2018-13378
- EPSS 0.34%
- Veröffentlicht 17.04.2019 15:29:00
- Zuletzt bearbeitet 21.11.2024 03:46:59
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.