Fortisiem Fortinet Fortisiem

Do you want an email whenever new security vulnerabilities are reported in Fortinet Fortisiem?

By the Year

In 2023 there have been 0 vulnerabilities in Fortinet Fortisiem . Last year Fortisiem had 1 security vulnerability published. Right now, Fortisiem is on track to have less security vulnerabilities in 2023 than it did last year.

Year Vulnerabilities Average Score
2023 0 0.00
2022 1 7.80
2021 0 0.00
2020 4 7.63
2019 1 7.20
2018 0 0.00

It may take a day or so for new Fortisiem vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Fortinet Fortisiem Security Vulnerabilities

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0

CVE-2022-26119 7.8 - High - November 02, 2022

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

authentification

A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could

CVE-2019-17653 8.8 - High - March 12, 2020

A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.

Session Riding

An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may

CVE-2019-17651 5.4 - Medium - January 28, 2020

An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.

XSS

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may

CVE-2019-16153 9.8 - Critical - January 23, 2020

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.

Use of Hard-coded Credentials

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may

CVE-2019-6700 6.5 - Medium - January 07, 2020

An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.

Insufficiently Protected Credentials

An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password

CVE-2018-13378 7.2 - High - April 17, 2019

An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.

Information Disclosure

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Fortinet Fortisiem or by Fortinet? Click the Watch button to subscribe.

Fortinet
Vendor

subscribe