Advisories · Technology

Fortinet FortiSIEM.

Every CVE that names Fortinet FortiSIEM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106173 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Path traversal in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-106176 CVE record

CVSS 3.4 Low

Missing authorization in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-84389 CVE record

CVSS 2.8 Low

Open redirect in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Open redirect
Not analysed yet 8 Sept 2026
CVE-2026-70467 CVE record

CVSS 3.4 Low

Server-side request forgery in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Server-side request forgery (SSRF)
Not analysed yet 12 Aug 2026
CVE-2026-59838 CVE record

CVSS 5.3 Medium

Cross-site scripting in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Cross-site scripting (XSS)
Not analysed yet 15 Jul 2026
CVE-2026-25972 CVE record

CVSS 4.1 Medium

Cross-site scripting in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Cross-site scripting (XSS)
Not analysed yet 10 Mar 2026
CVE-2025-64155 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 13 Jan 2026
CVE-2025-58324 CVE record

CVSS 6.1 Medium

Cross-site scripting in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2025
CVE-2025-25256 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 12 Aug 2025
CVE-2023-40714 CVE record

CVSS 9.7 CriticalCritical · CVSS 9+

Path traversal in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Path traversal
Not analysed yet 2 Apr 2025
CVE-2019-17659 CVE record

CVSS 3.6 Low

Hard-coded credentials in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Hard-coded credentials
Not analysed yet 17 Mar 2025
CVE-2024-55592 CVE record

CVSS 3.6 Low

Incorrect authorization in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Broken access control
Not analysed yet 11 Mar 2025
CVE-2023-40723 CVE record

CVSS 7.7 High

Information disclosure in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Information disclosure
Not analysed yet 11 Mar 2025
CVE-2024-27780 CVE record

CVSS 2.2 Low

Cross-site scripting in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Cross-site scripting (XSS)
Not analysed yet 11 Feb 2025
CVE-2024-46667 CVE record

CVSS 6.9 Medium

Resource allocation without limits in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2024-52969 CVE record

CVSS 3.7 Low

SQL injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- SQL injection
Not analysed yet 14 Jan 2025
CVE-2024-23108 CVE record

CVSS 9.7 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 5 Feb 2024
CVE-2024-23109 CVE record

CVSS 9.7 CriticalCritical · CVSS 9+

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 5 Feb 2024
CVE-2023-45585 CVE record

CVSS 2.1 Low

Sensitive information in log files in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Information disclosure
Not analysed yet 14 Nov 2023
CVE-2023-41676 CVE record

CVSS 4.2 Medium

Information disclosure in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Information disclosure
Not analysed yet 14 Nov 2023
CVE-2023-36553 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 14 Nov 2023
CVE-2023-34992 CVE record

CVSS 9.7 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Command injection
Not analysed yet 10 Oct 2023
CVE-2023-36551 CVE record

CVSS 4.2 Medium

Information disclosure in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Information disclosure
Not analysed yet 13 Sept 2023
CVE-2023-26204 CVE record

CVSS 3.6 Low

Plaintext password storage in Fortinet FortiSIEM
- Fortinet FortiSIEM
- CWE-256
Not analysed yet 13 Jun 2023
CVE-2022-43949 CVE record

CVSS 5.9 Medium

Broken or risky cryptographic algorithm in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Weak cryptography or TLS
Not analysed yet 13 Jun 2023
CVE-2022-42478 CVE record

CVSS 8.1 High

Unlimited authentication attempts in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Authentication bypass
Not analysed yet 13 Jun 2023
CVE-2022-26119 CVE record

CVSS 7.8 High

Fortinet FortiSIEM: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local…
- Fortinet FortiSIEM
Not analysed yet 2 Nov 2022
CVE-2019-17653 CVE record

Fortinet FortiSIEM: A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet…
- Fortinet FortiSIEM
Not analysed yet 12 Mar 2020
CVE-2019-17651 CVE record

An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attack…
- Fortinet FortiSIEM
Not analysed yet 28 Jan 2020
CVE-2019-16153 CVE record

Fortinet FortiSIEM: A hard-coded password vulnerability in the Fortinet FortiSIEM database component version…
- Fortinet FortiSIEM
Not analysed yet 23 Jan 2020
CVE-2019-6700 CVE record

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password v…
- Fortinet FortiSIEM
Not analysed yet 7 Jan 2020
CVE-2018-13378 CVE record

Fortinet FortiSIEM: An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions…
- Fortinet FortiSIEM
Not analysed yet 17 Apr 2019