{"id":"CVE-2023-40723","state":"PUBLISHED","title":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.","description":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request.","publishedAt":"2025-03-11T14:54:28.770Z","updatedAt":"2026-02-26T19:09:41.705Z","severity":{"score":7.7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiSIEM"],"affected":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","status":"affected","lessThanOrEqual":"6.7.4","versionType":"semver"},{"version":"6.6.0","status":"affected","lessThanOrEqual":"6.6.3","versionType":"semver"},{"version":"6.5.0","status":"affected","lessThanOrEqual":"6.5.1","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.2","versionType":"semver"},{"version":"6.3.0","status":"affected","lessThanOrEqual":"6.3.3","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.1","versionType":"semver"},{"version":"6.1.0","status":"affected","lessThanOrEqual":"6.1.2","versionType":"semver"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","status":"affected","lessThanOrEqual":"5.3.3","versionType":"semver"},{"version":"5.2.5","status":"affected","lessThanOrEqual":"5.2.8","versionType":"semver"},{"version":"5.2.1","status":"affected","lessThanOrEqual":"5.2.2","versionType":"semver"},{"version":"5.1.0","status":"affected","lessThanOrEqual":"5.1.3","versionType":"semver"}],"cpes":[]}],"references":["https://fortiguard.com/psirt/FG-IR-23-117"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/40xxx/CVE-2023-40723.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-40723","state":"PUBLISHED","datePublished":"2025-03-11T14:54:28.770Z","dateUpdated":"2026-02-26T19:09:41.705Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2023-08-21T09:03:44.316Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request."}],"affected":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","status":"affected","lessThanOrEqual":"6.7.4","versionType":"semver"},{"version":"6.6.0","status":"affected","lessThanOrEqual":"6.6.3","versionType":"semver"},{"version":"6.5.0","status":"affected","lessThanOrEqual":"6.5.1","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.2","versionType":"semver"},{"version":"6.3.0","status":"affected","lessThanOrEqual":"6.3.3","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.1","versionType":"semver"},{"version":"6.1.0","status":"affected","lessThanOrEqual":"6.1.2","versionType":"semver"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","status":"affected","lessThanOrEqual":"5.3.3","versionType":"semver"},{"version":"5.2.5","status":"affected","lessThanOrEqual":"5.2.8","versionType":"semver"},{"version":"5.2.1","status":"affected","lessThanOrEqual":"5.2.2","versionType":"semver"},{"version":"5.1.0","status":"affected","lessThanOrEqual":"5.1.3","versionType":"semver"}],"cpes":[]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-117","name":"https://fortiguard.com/psirt/FG-IR-23-117"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2025-03-11T14:54:28.770Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiSIEM version 7.0.2 or above \nPlease upgrade to FortiSIEM version 7.0.0 or above \nPlease upgrade to FortiSIEM version 6.7.5 or above \nPlease upgrade to FortiSIEM version 6.6.4 or above \nPlease upgrade to FortiSIEM version 6.5.2 or above \nPlease upgrade to FortiSIEM version 6.4.3 or above"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-40723","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-03-12T04:00:50.664894Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T19:09:41.705Z"}}]}}}