Filtered by vendor Fortinet Subscriptions
Filtered by product Fortisiem Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-17651 1 Fortinet 1 Fortisiem 2024-11-21 5.4 Medium
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
CVE-2019-16153 1 Fortinet 1 Fortisiem 2024-11-21 9.8 Critical
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
CVE-2018-13378 1 Fortinet 1 Fortisiem 2024-11-21 N/A
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.