Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*

part: a version: 7.4.2 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortisiem (048310e2-337d-5847-a81f-f8d45f25cb1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-106176 vulnerable 2026-11-03 10:16:14.236397 Details available
LOW (3.4)
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests
Published: 2026-10-13T17:37:08.221Z
Updated: 2026-10-14T10:51:04.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106173 vulnerable 2026-11-03 10:16:14.036204 Details available
CRITICAL (9.4)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4 all versions, FortiSIEM 7.3 all versions, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions may allow attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2026-10-13T17:37:09.900Z
Updated: 2026-11-10T20:10:38.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84389 vulnerable 2026-09-16 04:33:10.322294 Details available
LOW (2.8)
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-09-08T16:41:45.842Z
Updated: 2026-11-03T22:23:37.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70467 vulnerable 2026-09-16 04:33:00.268856 Details available
LOW (3.4)
A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-08-12T12:19:02.208Z
Updated: 2026-08-13T15:41:52.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.