Fortinet FortiSIEM
26 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-106173 | 7.5.0 ; 7.4.0 – 7.4.2 ; 7.3.0 – 7.3.5 ; … | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacke | CRITICAL 9.8 | 1.0 % | ||
| CVE-2026-106176 | 7.5.0 – 7.5.1 ; 7.4.0 – 7.4.2 ; 7.3.0 – 7.3.5 ; … | A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially | LOW 3.8 | 0.2 % | ||
| CVE-2026-84389 | 7.5.0 – 7.5.1 ; 7.4.1 – 7.4.2 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 | LOW 3.1 | 0.2 % | ||
| CVE-2026-70467 | 7.5.0 ; 7.4.0 – 7.4.2 ; 7.3.0 – 7.3.5 ; … | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5 | LOW 3.8 | 0.3 % | ||
| CVE-2026-59838 | 7.4.0 ; 7.3.0 – 7.3.4 ; 7.2.0 – 7.2.6 ; … | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 t | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-25972 | 7.4.0 ; 7.3.0 – 7.3.4 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-64155 | 7.4.0 ; 7.3.0 – 7.3.4 ; 7.2.6 ; … | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, For | CRITICAL 9.8 | 44 % | ||
| CVE-2025-58324 | 7.2.0 – 7.2.2 ; 7.1.0 – 7.1.9 ; 7.0.0 – 7.0.4 ; … | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7. | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-25256 | 7.3.0 – 7.3.1 ; 7.2.0 – 7.2.5 ; 7.1.0 – 7.1.7 ; … | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin | CRITICAL 9.8 | 65 % | ||
| CVE-2023-40714 | 7.0.0 ; 6.7.0 – 6.7.2 ; 6.6.0 – 6.6.3 ; … | A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to es | CRITICAL 9.7 | 0.7 % | ||
| CVE-2019-17659 | 5.2.6 | A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH acc | HIGH 8.1 | 0.7 % | ||
| CVE-2024-55592 | 7.2.0 – 7.2.5 ; 7.1.0 – 7.1.7 ; 7.0.0 – 7.0.3 ; … | An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 | LOW 3.8 | 0.3 % | ||
| CVE-2023-40723 | 6.7.0 – 6.7.4 ; 6.6.0 – 6.6.3 ; 6.5.0 – 6.5.1 ; … | An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and | HIGH 8.1 | 0.4 % | ||
| CVE-2024-27780 | 7.1.0 – 7.1.7 ; 7.0.0 – 7.0.3 ; 6.7.0 – 6.7.9 | Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-46667 | 7.1.0 – 7.1.5 ; 7.0.0 – 7.0.3 ; 6.7.0 – 6.7.9 ; … | A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all v | HIGH 7.5 | 0.6 % | ||
| CVE-2024-52969 | 7.1.0 – 7.1.7 ; 7.0.0 – 7.0.3 ; 6.7.0 – 6.7.9 ; … | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-23108 | 7.1.0 – 7.1.1 ; 7.0.0 – 7.0.2 ; 6.7.0 – 6.7.8 ; … | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to | CRITICAL 9.8 | 80 % | ||
| CVE-2024-23109 | 7.1.1 ; 7.0.0 – 7.0.2 ; 6.7.0 – 6.7.8 ; … | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to | CRITICAL 9.8 | 3.3 % | ||
| CVE-2023-45585 | 7.0.0 ; 6.7.0 – 6.7.6 ; 6.6.0 – 6.6.3 ; … | An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6. | LOW 3.3 | 0.2 % | ||
| CVE-2023-41676 | 7.0.0 ; 6.7.0 – 6.7.5 | An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker w | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-36553 | 5.4.0 ; 5.3.0 – 5.3.3 ; 5.2.5 – 5.2.8 ; … | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 t | CRITICAL 9.8 | 1.9 % | ||
| CVE-2023-34992 | 7.0.0 ; 6.7.0 – 6.7.5 ; 6.6.0 – 6.6.3 ; … | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to e | CRITICAL 9.8 | 82 % | ||
| CVE-2023-36551 | 6.7.0 – 6.7.5 | A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to informatio | MEDIUM 5.3 | 0.7 % | ||
| CVE-2023-26204 | 6.7.0 – 6.7.5 ; 6.6.0 – 6.6.3 ; 6.5.0 – 6.5.1 ; … | A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all version | CRITICAL 9.8 | 0.4 % | ||
| CVE-2022-43949 | 6.7.0 – 6.7.1 ; 6.6.0 – 6.6.3 ; 6.5.0 – 6.5.1 ; … | A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to | HIGH 7.5 | 0.4 % | ||
| CVE-2022-42478 | 6.7.0 ; 6.6.0 – 6.6.3 ; 6.5.0 – 6.5.1 ; … | An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access | HIGH 8.8 | 0.5 % |