Fortinet FortiSIEM 3.1.2

CPE Details

Fortinet FortiSIEM 3.1.2
fortinet
fortisiem
3.1.2
2021-11-03
13h49 +00:00
2021-11-04
13h39 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:fortinet:fortisiem:3.1.2:*:*:*:*:*:*:*

Informations

Vendor

fortinet

Product

fortisiem

Version

3.1.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-41023 2021-11-02 17h26 +00:00 A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files
5.5
Moyen
CVE-2021-41022 2021-11-02 17h23 +00:00 A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts
7.8
Haute
CVE-2019-17651 2020-01-27 23h44 +00:00 An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
5.4
Moyen
CVE-2019-6700 2020-01-07 17h19 +00:00 An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
6.5
Moyen
CVE-2018-13378 2019-04-17 12h41 +00:00 An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.
7.2
Haute