Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-59841 1 Fortinet 1 Fortisiemwindowsagent 2026-08-01 6.9 Medium
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>
CVE-2025-25256 1 Fortinet 1 Fortisiem 2026-02-26 9.8 Critical
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.
CVE-2023-40714 1 Fortinet 1 Fortisiem 2025-07-15 9.7 Critical
A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements