5.9
Medium
CVE-2022-43949 A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote…
Description
A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSIEM 6.7 | 6.7.0 → 6.7.1 | No fix stated |
| FortiSIEM 6.6 | 6.6.0 → 6.6.3 | No fix stated |
| FortiSIEM 6.5 | 6.5.0 → 6.5.1 | No fix stated |
| FortiSIEM 6.4 | 6.4.0 → 6.4.2 | No fix stated |
| FortiSIEM 6.3 | 6.3.0 → 6.3.3 | No fix stated |
| FortiSIEM 6.2 | 6.2.0 → 6.2.1 | No fix stated |
| FortiSIEM 6.1 | 6.1.0 → 6.1.2 | No fix stated |
| FortiSIEM | 5.4.0 | No fix stated |
| FortiSIEM 5.3 | 5.3.0 → 5.3.3 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSIEM
The 26 CVEs of FortiSIEM →
CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…
9.4
Critical
CVE-2026-106176
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or…
3.4
Low
CVE-2026-84389
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM…
2.8
Low
CVE-2026-70467
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM…
3.4
Low