Fortinet Fortisiem vulnerabilities

CVE-2022-43949 [HIGH] CWE-327 CVE-2022-43949: A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 all A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.

CVE-2022-26119 [HIGH] CWE-798 CVE-2022-26119: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker w A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

CVE-2021-41022 [HIGH] CWE-269 CVE-2021-41022: A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows a A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts

CVE-2021-41023 [MEDIUM] CWE-522 CVE-2021-41023: A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below all A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files

CVE-2020-9292 [CRITICAL] CWE-428 An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated p... FG-IR-20-021: An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated p... An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path. CVEs: CVE-2020-9292 CWEs: CWE-4

CVE-2019-17653 [HIGH] CWE-352 CVE-2019-17653: A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.

CVE-2019-17651 [MEDIUM] CWE-79 CVE-2019-17651: An Improper Neutralization of Input vulnerability in the description and title parameters of a Devic An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedu

CVE-2019-16153 [CRITICAL] CWE-798 CVE-2019-16153: A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and b A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.

CVE-2019-6700 [MEDIUM] CWE-200 CVE-2019-6700: An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.

CVE-2018-13378 [HIGH] CWE-200 CVE-2018-13378: An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the L An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.