SSRF flaws reported in Fortinet FortiSIEM GUI and Cisco Finesse management interface
VULNERABILITYCiscoredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
Two separate flaws have been reported that could let attackers make a server send web requests on their behalf. The FortiSIEM issue needs the attacker to be logged in and is rated low. The Cisco Finesse issue can be exploited without logging in and could expose limited sensitive information, and it is rated high.
Like I’m new · Written by AI from 2 sources · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
Fortinet PSIRT AdvisoriesHorizon3.ai