Fortinet: >> Fortisiem >> 5.2.0 Security Vulnerabilities
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule.
CVSS Score
5.4
EPSS Score
0.002
Published
2020-01-28
A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
CVSS Score
9.8
EPSS Score
0.004
Published
2020-01-23
An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
CVSS Score
6.5
EPSS Score
0.003
Published
2020-01-07
An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code.
CVSS Score
7.2
EPSS Score
0.004
Published
2019-04-17