FO
Product
FortiSIEM
35
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 9High 11Medium 10Low 5
Watch
Add FortiSIEM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-52969 | 6.5 | Jan 14 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3… Affected: 6.4.0 through 7.1.7 |
| CVE-2023-41676 | 6.5 | Nov 14 | An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to… Affected: 6.7.0 through 6.7.5; 7.0.0 |
| CVE-2019-6700 | 6.5 | Jan 7 | An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external… Affected: before 5.2.5 |
| CVE-2026-25972 | 6.1 | Mar 10 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote… Affected: 7.3.0 before 7.3.5; 7.4.0 |
| CVE-2021-41023 | 5.5 | Nov 2 | A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext… Affected: 3.1.0 through 4.1.4 |
| CVE-2024-27780 | 5.4 | Feb 11 | Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all… Affected: 6.7.0 through 6.7.9; 7.0.0 through 7.0.3; 7.1.0 through 7.1.8 |
| CVE-2019-17651 | 5.4 | Jan 28 | An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote… Affected: through 5.2.5 |
| CVE-2023-36551 | 5.3 | Sep 13 | A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request Affected: 6.7.0 before 6.7.6 |
| CVE-2026-59838 | 4.8 | Jul 15 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through… Affected: 7.4.0; 7.3.0 through 7.3.4; 7.2.0 through 7.2.6; 7.1.0 through 7.1.9; 7.0.0 through 7.0.4; 6.7.0 through 6.7.10; +5 more |
| CVE-2025-58324 | 4.8 | Oct 14 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6… Affected: 6.2.0 before 7.2.3 |
Showing 10