| CVE-2026-106173 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…
|
9.4
Critical
|
Oct 13, 2026 |
| CVE-2026-106176 |
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or…
|
3.4
Low
|
Oct 13, 2026 |
| CVE-2026-84389 |
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM…
|
2.8
Low
|
Sep 8, 2026 |
| CVE-2026-70467 |
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM…
|
3.4
Low
|
Aug 12, 2026 |
| CVE-2026-59838 |
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM…
|
5.3
Medium
|
Jul 15, 2026 |
| CVE-2026-25972 |
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
4.1
Medium
|
Mar 10, 2026 |
| CVE-2025-64155 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
9.4
Critical
|
Jan 13, 2026 |
| CVE-2025-58324 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through…
|
6.1
Medium
|
Oct 14, 2025 |
| CVE-2025-25256 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
9.8
Critical
|
Aug 12, 2025 |
| CVE-2023-40714 |
A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0…
|
9.7
Critical
|
Apr 2, 2025 |
| CVE-2019-17659 |
A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated…
|
3.6
Low
|
Mar 17, 2025 |
| CVE-2024-55592 |
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions,…
|
3.6
Low
|
Mar 11, 2025 |
| CVE-2023-40723 |
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and…
|
7.7
High
|
Mar 11, 2025 |
| CVE-2024-27780 |
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79]…
|
2.2
Low
|
Feb 11, 2025 |
| CVE-2024-46667 |
A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all…
|
6.9
Medium
|
Jan 14, 2025 |
| CVE-2024-52969 |
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in…
|
3.7
Low
|
Jan 14, 2025 |
| CVE-2024-23108 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
9.7
Critical
|
Feb 5, 2024 |
| CVE-2024-23109 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
9.7
Critical
|
Feb 5, 2024 |
| CVE-2023-45585 |
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6…
|
2.1
Low
|
Nov 14, 2023 |
| CVE-2023-41676 |
An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may…
|
4.2
Medium
|
Nov 14, 2023 |
| CVE-2023-36553 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM…
|
9.3
Critical
|
Nov 14, 2023 |
| CVE-2023-34992 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
9.7
Critical
|
Oct 10, 2023 |
| CVE-2023-36551 |
A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows…
|
4.2
Medium
|
Sep 13, 2023 |
| CVE-2023-26204 |
A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all…
|
3.6
Low
|
Jun 13, 2023 |
| CVE-2022-43949 |
A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote…
|
5.9
Medium
|
Jun 13, 2023 |