CVE-2023-40714 in FortiSIEM

Sumário

de MITRE • 02/04/2025

A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: Fortinet
• Reservar: 21/08/2023
• Divulgação: 02/04/2025
• Moderação: aceite
• Entrada: VDB-302993
• CPE: pronto
• CWE: CWE-23 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.00569
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-40714
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40714
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-40714/