CVE-2023-41676

6.5 mediumEPSS 0.4%

Medium (6.5) in fortinet fortisiem. EPSS 0.4% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the logs.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-200
Published: 2023-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortisiem

References

https://fortiguard.com/psirt/FG-IR-23-290
https://fortiguard.com/psirt/FG-IR-23-290

Check your stack JSON