Fortinet Fortisiem vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fortinet Fortisiem: 9 record(s), with affected versions and fixes.cpe:2.3:a:fortinet:fortisiem
CVE-2026-106176
Low · 3.8
CWE-862 Oct 13, 2026
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute...
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests
CVE-2026-106173
Critical · 9.8
CWE-22 Oct 13, 2026
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2026-84389
Low · 3.1
CWE-601 Sep 8, 2026
Open Redirect in Fortinet Fortisiem
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
CVE-2026-70467
Low · 3.8
CWE-918 Aug 12, 2026
Server-Side Request Forgery (SSRF) in Fortinet Fortisiem
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
CVE-2026-59838
Medium · 4.8
CWE-80 Jul 15, 2026
A improper neutralization of script-related html tags in a web page (basic xss)…
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
CVE-2026-59841
High · 7.5
CWE-923 Jul 14, 2026
A improper restriction of communication channel to intended endpoints vulnerability in…
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>
CVE-2026-25972
Medium · 6.1
CWE-79 Mar 10, 2026
Cross-site Scripting (XSS) in Fortinet Fortisiem
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters.
CVE-2025-64155
Critical · 9.8
CWE-78 Jan 13, 2026
OS Command Injection in Fortinet Fortisiem
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.
CVE-2025-58324
Medium · 4.8
CWE-79 Oct 14, 2025
Cross-site Scripting (XSS) in Fortinet Fortisiem
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.