Fortinet Fortisiem vulnerabilities

4 vulnerabilities

Known vulnerabilities in Fortinet Fortisiem, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2022-26119fortinetfortinet fortisiem+1
EPSS score
0.20%
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.9.8CVE-2019-16153fortinetfortinet fortisiem+1
EPSS score
1.15%
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.5.4CVE-2019-17651fortinetfortinet fortisiem+1
EPSS score
0.62%
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.8.8CVE-2019-17653fortinetfortinet fortisiem+1
EPSS score
0.56%
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.