Skip to content

Fortinet Fortisiem vulnerabilities

fortinet fortisiemA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...CVE-2026-106173Public exploit9.4 CriticalOctober 13, 2026
fortinet fortisiemA missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute...CVE-2026-1061763.4 LowOctober 13, 2026
fortinet fortisiemA url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0...CVE-2026-843892.8 LowSeptember 8, 2026
fortinet fortisiemA server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0...CVE-2026-704673.4 LowAugust 12, 2026
fortinet fortisiemA improper neutralization of script-related html tags in a web page (basic xss) vulnerability in...CVE-2026-598385.3 MediumJuly 15, 2026
fortinet fortisiem, fortisiemwindowsagent +1 moreA improper restriction of communication channel to intended endpoints vulnerability in Fortinet...CVE-2026-598416.9 MediumJuly 14, 2026
fortinet fortisiemAn improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-259724.1 MediumMarch 10, 2026
fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection')...CVE-2025-64155Public exploitEPSS 43.9%9.4 CriticalJanuary 13, 2026
fortinet fortisiemAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2025-583246.1 MediumOctober 14, 2025
fortinet fortisiemAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-25256Public exploitEPSS 65.0%9.8 CriticalAugust 12, 2025
fortinet fortisiemA relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0...CVE-2023-407149.7 CriticalApril 2, 2025
fortinet fortisiemA use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote...CVE-2019-176593.6 LowMarch 17, 2025
fortinet fortisiemAn incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all...CVE-2024-555923.6 LowMarch 11, 2025
fortinet fortisiemAn exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...CVE-2023-407237.7 HighMarch 11, 2025
fortinet fortisiemMultiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2024-277802.2 LowFebruary 11, 2025
fortinet fortisiemA allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5...CVE-2024-466676.9 MediumJanuary 14, 2025
fortinet fortisiemAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2024-529693.7 LowJanuary 14, 2025
fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-23108Public exploitEPSS 80.3%9.7 CriticalFebruary 5, 2024
fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2024-231099.7 CriticalFebruary 5, 2024
fortinet fortisiemAn insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version...CVE-2023-455852.1 LowNovember 14, 2023
fortinet fortisiemAn exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0...CVE-2023-416764.2 MediumNovember 14, 2023
fortinet fortisiemA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-365539.3 CriticalNovember 14, 2023
fortinet fortisiemA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-34992Public exploitEPSS 81.7%9.7 CriticalOctober 10, 2023
fortinet fortisiemA exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...CVE-2023-365514.2 MediumSeptember 13, 2023
fortinet fortisiemA plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all...CVE-2023-262043.6 LowJune 13, 2023
fortinet fortisiemA use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1...CVE-2022-439495.9 MediumJune 13, 2023
fortinet fortisiemAn Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0...CVE-2022-424788.1 HighJune 13, 2023
fortinet fortisiemA improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local...CVE-2022-261197.8 HighNovember 2, 2022
fortinet fortisiem, fortisiemwindowsagent +1 moreA unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...CVE-2021-410235.5 MediumNovember 2, 2021
fortinet fortisiem, fortisiemwindowsagent +1 moreA improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below...CVE-2021-410227.8 HighNovember 2, 2021
fortinet fortisiem windows agent, fortisiemwindowsagent +1 moreAn unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an...CVE-2020-92929.8 CriticalJune 4, 2020
fortinet fortisiemA Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2...CVE-2019-176538.8 HighMarch 12, 2020
fortinet fortisiemAn Improper Neutralization of Input vulnerability in the description and title parameters of a...CVE-2019-176515.4 MediumJanuary 28, 2020
fortinet fortisiemA hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5...CVE-2019-161539.8 CriticalJanuary 23, 2020
fortinet fortisiemAn information exposure vulnerability in the external authentication profile form of FortiSIEM 5...CVE-2019-67006.5 MediumJanuary 7, 2020
fortinet fortisiemAn information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes...CVE-2018-133787.2 HighApril 17, 2019