Fortinet FortiSIEM 5.2.2

CPE Details

Fortinet FortiSIEM 5.2.2
fortinet
fortisiem
5.2.2
2022-11-02
15h27 +00:00
2022-11-02
15h30 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*

Informations

Vendor

fortinet

Product

fortisiem

Version

5.2.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-36553 2023-11-14 18h05 +00:00 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
9.8
Critique
CVE-2022-42478 2023-06-13 08h41 +00:00 An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints.
8.8
Haute
CVE-2022-26119 2022-11-01 23h00 +00:00 A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
7.8
Haute
CVE-2019-17651 2020-01-27 23h44 +00:00 An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
5.4
Moyen
CVE-2019-16153 2020-01-23 15h39 +00:00 A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
9.8
Critique
CVE-2019-6700 2020-01-07 17h19 +00:00 An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
6.5
Moyen