Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*

part: a version: 7.0.4 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisiem (048310e2-337d-5847-a81f-f8d45f25cb1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-59838 vulnerable 2026-07-29 01:03:17.829723 Details available
MEDIUM (5.3)
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-07-15T13:43:36.794Z
Updated: 2026-07-15T14:23:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64155 vulnerable 2026-06-08 07:39:18.124179 Details available
CRITICAL (9.4)
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.
Published: 2026-01-13T16:32:28.665Z
Updated: 2026-02-26T15:04:42.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58324 vulnerable 2026-06-08 07:35:17.712645 Details available
MEDIUM (6.1)
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests.
Published: 2025-10-14T15:22:35.310Z
Updated: 2026-02-26T17:47:36.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.