📦 Fortisiem

This CVE describes an OS command injection vulnerability in Fortinet FortiSIEM that allows attackers to execute arbitrary commands via crafted TCP requests. The vulnerability affects multiple FortiSIE...

This critical vulnerability allows unauthenticated attackers to execute arbitrary operating system commands on FortiSIEM systems via crafted CLI requests. It affects FortiSIEM versions 6.7.8 and earli...

This vulnerability allows attackers to perform relative path traversal in Fortinet FortiSIEM, enabling privilege escalation by uploading malicious GUI elements. It affects FortiSIEM versions 7.0.0, 6....

This CVE describes an OS command injection vulnerability in Fortinet products that allows attackers to execute arbitrary commands via crafted API requests. Attackers can achieve remote code execution ...

This CVE describes an OS command injection vulnerability in Fortinet FortiSIEM that allows attackers to execute arbitrary commands on affected systems via crafted API requests. The vulnerability affec...

This critical OS command injection vulnerability in Fortinet products allows attackers to execute arbitrary commands on affected systems by sending specially crafted API requests. Attackers can gain c...

This vulnerability in Fortinet FortiSIEM allows attackers to execute unauthorized code or commands via API requests, potentially leading to full system compromise. It affects multiple versions across ...

This vulnerability in Fortinet FortiSIEM allows attackers to cause denial of service by consuming all available TLS connections through resource allocation without limits. It affects all versions of F...

CVE-2022-42478 is an authentication brute force vulnerability in FortiSIEM that allows non-privileged users to perform unlimited authentication attempts against multiple endpoints. This affects FortiS...

This vulnerability allows attackers to execute privileged code or commands on Windows systems running vulnerable FortiSIEM agents via PowerShell scripts. It affects Fortinet FortiSIEM Windows Agent ve...

This vulnerability allows authenticated attackers to inject malicious scripts into FortiSIEM web pages, which execute when other users view those pages. It affects all versions of FortiSIEM from 6.2 t...

This SQL injection vulnerability in FortiSIEM's Update/Create Case feature allows authenticated attackers to extract database information via crafted requests. It affects multiple FortiSIEM versions, ...