Fortisiem Windows Agent Security Vulnerabilities
An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the...
6.5CVSS
6.3AI Score
0.0005EPSS
A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log...
5.5CVSS
5.4AI Score
0.0004EPSS
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell...
7.8CVSS
7.8AI Score
0.0004EPSS
An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service...
9.8CVSS
9.5AI Score
0.002EPSS