| CVE-2026-106173 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…
|
9.4
Critique
|
13 oct. 2026 |
| CVE-2026-106176 |
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or…
|
3.4
Faible
|
13 oct. 2026 |
| CVE-2026-84389 |
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM…
|
2.8
Faible
|
8 sept. 2026 |
| CVE-2026-70467 |
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM…
|
3.4
Faible
|
12 août 2026 |
| CVE-2026-59838 |
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM…
|
5.3
Moyenne
|
15 juil. 2026 |
| CVE-2026-25972 |
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
|
4.1
Moyenne
|
10 mars 2026 |
| CVE-2025-64155 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
9.4
Critique
|
13 janv. 2026 |
| CVE-2025-58324 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through…
|
6.1
Moyenne
|
14 oct. 2025 |
| CVE-2025-25256 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
9.8
Critique
|
12 août 2025 |
| CVE-2023-40714 |
A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0…
|
9.7
Critique
|
2 avr. 2025 |
| CVE-2019-17659 |
A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated…
|
3.6
Faible
|
17 mars 2025 |
| CVE-2024-55592 |
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions,…
|
3.6
Faible
|
11 mars 2025 |
| CVE-2023-40723 |
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and…
|
7.7
Élevée
|
11 mars 2025 |
| CVE-2024-27780 |
Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79]…
|
2.2
Faible
|
11 févr. 2025 |
| CVE-2024-46667 |
A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all…
|
6.9
Moyenne
|
14 janv. 2025 |
| CVE-2024-52969 |
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in…
|
3.7
Faible
|
14 janv. 2025 |
| CVE-2024-23108 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
9.7
Critique
|
5 févr. 2024 |
| CVE-2024-23109 |
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
9.7
Critique
|
5 févr. 2024 |
| CVE-2023-45585 |
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6…
|
2.1
Faible
|
14 nov. 2023 |
| CVE-2023-41676 |
An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may…
|
4.2
Moyenne
|
14 nov. 2023 |
| CVE-2023-36553 |
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM…
|
9.3
Critique
|
14 nov. 2023 |
| CVE-2023-34992 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
|
9.7
Critique
|
10 oct. 2023 |
| CVE-2023-36551 |
A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows…
|
4.2
Moyenne
|
13 sept. 2023 |
| CVE-2023-26204 |
A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all…
|
3.6
Faible
|
13 juin 2023 |
| CVE-2022-43949 |
A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote…
|
5.9
Moyenne
|
13 juin 2023 |