# Fortinet FortiSIEM.

Every CVE that names Fortinet FortiSIEM among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Path traversal in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-106173.md)
  `CVE-2026-106173` · CVE record: Fortinet FortiSIEM · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Missing authorization in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-106176.md)
  `CVE-2026-106176` · CVE record: Fortinet FortiSIEM · CVSS 3.4 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Open redirect in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-84389.md)
  `CVE-2026-84389` · CVE record: Fortinet FortiSIEM · CVSS 2.8 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Open redirect
- [Server-side request forgery in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-70467.md)
  `CVE-2026-70467` · CVE record: Fortinet FortiSIEM · CVSS 3.4 Low · Not analysed yet · Published 12 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Cross-site scripting in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-59838.md)
  `CVE-2026-59838` · CVE record: Fortinet FortiSIEM · CVSS 5.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-25972.md)
  `CVE-2026-25972` · CVE record: Fortinet FortiSIEM · CVSS 4.1 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Cross-site scripting (XSS)
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2025-64155.md)
  `CVE-2025-64155` · CVE record: Fortinet FortiSIEM · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.44 · Not analysed yet · Published 13 Jan 2026 · Tags: Command injection
- [Cross-site scripting in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2025-58324.md)
  `CVE-2025-58324` · CVE record: Fortinet FortiSIEM · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site scripting (XSS)
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2025-25256.md)
  `CVE-2025-25256` · CVE record: Fortinet FortiSIEM · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.65 · Not analysed yet · Published 12 Aug 2025 · Tags: Command injection
- [Path traversal in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-40714.md)
  `CVE-2023-40714` · CVE record: Fortinet FortiSIEM · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2025 · Tags: Path traversal
- [Hard-coded credentials in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2019-17659.md)
  `CVE-2019-17659` · CVE record: Fortinet FortiSIEM · CVSS 3.6 Low · Not analysed yet · Published 17 Mar 2025 · Tags: Hard-coded credentials
- [Incorrect authorization in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-55592.md)
  `CVE-2024-55592` · CVE record: Fortinet FortiSIEM · CVSS 3.6 Low · Not analysed yet · Published 11 Mar 2025 · Tags: Broken access control
- [Information disclosure in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-40723.md)
  `CVE-2023-40723` · CVE record: Fortinet FortiSIEM · CVSS 7.7 High · Not analysed yet · Published 11 Mar 2025 · Tags: Information disclosure
- [Cross-site scripting in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-27780.md)
  `CVE-2024-27780` · CVE record: Fortinet FortiSIEM · CVSS 2.2 Low · Not analysed yet · Published 11 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Resource allocation without limits in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-46667.md)
  `CVE-2024-46667` · CVE record: Fortinet FortiSIEM · CVSS 6.9 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [SQL injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-52969.md)
  `CVE-2024-52969` · CVE record: Fortinet FortiSIEM · CVSS 3.7 Low · Not analysed yet · Published 14 Jan 2025 · Tags: SQL injection
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-23108.md)
  `CVE-2024-23108` · CVE record: Fortinet FortiSIEM · CVSS 9.7 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.80 · Not analysed yet · Published 5 Feb 2024 · Tags: Command injection
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2024-23109.md)
  `CVE-2024-23109` · CVE record: Fortinet FortiSIEM · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Feb 2024 · Tags: Command injection
- [Sensitive information in log files in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-45585.md)
  `CVE-2023-45585` · CVE record: Fortinet FortiSIEM · CVSS 2.1 Low · Not analysed yet · Published 14 Nov 2023 · Tags: Information disclosure
- [Information disclosure in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-41676.md)
  `CVE-2023-41676` · CVE record: Fortinet FortiSIEM · CVSS 4.2 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Information disclosure
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-36553.md)
  `CVE-2023-36553` · CVE record: Fortinet FortiSIEM · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2023 · Tags: Command injection
- [OS command injection in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-34992.md)
  `CVE-2023-34992` · CVE record: Fortinet FortiSIEM · CVSS 9.7 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.82 · Not analysed yet · Published 10 Oct 2023 · Tags: Command injection
- [Information disclosure in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-36551.md)
  `CVE-2023-36551` · CVE record: Fortinet FortiSIEM · CVSS 4.2 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Information disclosure
- [Plaintext password storage in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2023-26204.md)
  `CVE-2023-26204` · CVE record: Fortinet FortiSIEM · CVSS 3.6 Low · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-256
- [Broken or risky cryptographic algorithm in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2022-43949.md)
  `CVE-2022-43949` · CVE record: Fortinet FortiSIEM · CVSS 5.9 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: Weak cryptography or TLS
- [Unlimited authentication attempts in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2022-42478.md)
  `CVE-2022-42478` · CVE record: Fortinet FortiSIEM · CVSS 8.1 High · Not analysed yet · Published 13 Jun 2023 · Tags: Authentication bypass
- [Fortinet FortiSIEM: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local…](https://agentprime.io/advisories/CVE-2022-26119.md)
  `CVE-2022-26119` · CVE record: Fortinet Fortinet FortiSIEM · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2022
- [Fortinet FortiSIEM: A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet…](https://agentprime.io/advisories/CVE-2019-17653.md)
  `CVE-2019-17653` · CVE record: Fortinet Fortinet FortiSIEM · No CVSS score · Not analysed yet · Published 12 Mar 2020
- [An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attack…](https://agentprime.io/advisories/CVE-2019-17651.md)
  `CVE-2019-17651` · CVE record: Fortinet Fortinet FortiSIEM · No CVSS score · Not analysed yet · Published 28 Jan 2020
- [Fortinet FortiSIEM: A hard-coded password vulnerability in the Fortinet FortiSIEM database component version…](https://agentprime.io/advisories/CVE-2019-16153.md)
  `CVE-2019-16153` · CVE record: Fortinet Fortinet FortiSIEM · No CVSS score · Not analysed yet · Published 23 Jan 2020
- [An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password v…](https://agentprime.io/advisories/CVE-2019-6700.md)
  `CVE-2019-6700` · CVE record: Fortinet FortiSIEM · No CVSS score · Not analysed yet · Published 7 Jan 2020
- [Fortinet FortiSIEM: An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions…](https://agentprime.io/advisories/CVE-2018-13378.md)
  `CVE-2018-13378` · CVE record: Fortinet FortiSIEM · No CVSS score · Not analysed yet · Published 17 Apr 2019

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fortinet-fortisiem>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fortinet-fortisiem/>. Everything for agents: <https://agentprime.io/llms.txt>.