Vulnerabilities > Fortinet > Fortisiem > 3.1.2

DATE CVE VULNERABILITY TITLE RISK
2021-11-02 CVE-2021-41022 Improper Privilege Management vulnerability in Fortinet Fortisiem
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts
local
low complexity
fortinet CWE-269
7.8
2021-11-02 CVE-2021-41023 Insufficiently Protected Credentials vulnerability in Fortinet Fortisiem
A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files
local
low complexity
fortinet CWE-522
5.5
2020-01-28 CVE-2019-17651 Cross-site Scripting vulnerability in Fortinet Fortisiem
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
network
low complexity
fortinet CWE-79
5.4
2020-01-07 CVE-2019-6700 Insufficiently Protected Credentials vulnerability in Fortinet Fortisiem
An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
network
low complexity
fortinet CWE-522
6.5
2019-04-17 CVE-2018-13378 Information Exposure vulnerability in Fortinet Fortisiem
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.
network
low complexity
fortinet CWE-200
7.2