CVE-2022-43949: Fortinet Fortisiem

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.

Affected products

• Fortinet Fortisiem: from 5.3.0, up to and including 5.3.3; from 6.3.0, up to and including 6.3.3; from 6.6.0, up to and including 6.6.3; version 5.4.0 only; version 6.1.0 only; version 6.1.1 only; …

Published 2023-06-13. Last modified 2026-06-17.