Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*

part: a version: 7.1.8 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisiem (048310e2-337d-5847-a81f-f8d45f25cb1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-106176 vulnerable 2026-11-03 10:16:14.258473 Details available
LOW (3.4)
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests
Published: 2026-10-13T17:37:08.221Z
Updated: 2026-10-14T10:51:04.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106173 vulnerable 2026-11-03 10:16:14.051219 Details available
CRITICAL (9.4)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4 all versions, FortiSIEM 7.3 all versions, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions may allow attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2026-10-13T17:37:09.900Z
Updated: 2026-11-10T20:10:38.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70467 vulnerable 2026-09-16 04:33:00.283606 Details available
LOW (3.4)
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-08-12T12:19:02.208Z
Updated: 2026-08-13T15:41:52.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59838 vulnerable 2026-07-29 01:03:17.821607 Details available
MEDIUM (5.3)
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-07-15T13:43:36.794Z
Updated: 2026-07-15T14:23:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64155 vulnerable 2026-06-08 07:39:18.123103 Details available
CRITICAL (9.4)
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.
Published: 2026-01-13T16:32:28.665Z
Updated: 2026-02-26T15:04:42.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58324 vulnerable 2026-06-08 07:35:17.702817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.