Fortinet FortiSIEM 6.5.x < 7.3.6 / 7.4.x < 7.4.3 / 7.5.0 < 7.5.1 SSRF (FG-IR-26-159)

The version of Fortinet FortiSIEM running on the remote host is 6.5.x through 7.3.x prior to 7.3.6, 7.4.x prior to 7.4.3, or 7.5.0. It is, therefore, affected by a server-side request forgery vulnerability: - A server-side request forgery SSRF vulnerability in FortiSIEM GUI may allow an...

The vulnerability of the graphical user interface of the FortiSIEM security management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the graphical user interface of the FortiSIEM security management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks by sending specially crafted HTTP requests...