Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-40723

An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request.

Published

2025-03-11T15:15:39.843

Last Modified

2025-07-22T21:21:00.950

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortisiem < 6.4.2 Yes
Application fortinet fortisiem < 6.5.2 Yes
Application fortinet fortisiem < 6.6.4 Yes
Application fortinet fortisiem < 6.7.5 Yes
References