{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T01:50:29.109","vulnerabilities":[{"cve":{"id":"CVE-2023-36553","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:48.093","lastModified":"2024-11-21T08:09:55.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSIEM versión 5.4.0 y 5.3.0 a 5.3.3 y 5.2.5 a 5.2.8 y 5.2.1 a 5.2.2 y 5.1.0 a 5.1.3 y 5.0.0 a 5.0.1 y 4.10.0 y 4.9.0 y 4.7.2 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes API manipuladas."}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.3","matchCriteriaId":"D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A44DC3AB-BF8F-4818-A1B2-413C28E3247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"9070EE8F-690A-4A25-A04F-25DB9AC2525A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC6DCBF-8725-42AD-80A6-4D8BBA8B594A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"966F62A1-10E7-4AFF-8725-2A4425179CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9040EA7-86F7-4553-A0C8-A6C76B0C9E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE69B846-3B23-401D-98D0-46DC976A25FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DE4C2A49-23CB-4104-A345-46B3B4A29A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4B114C6F-82AF-4ADF-B840-61851B9E39C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0C759185-C780-426F-8185-258C88A924A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B669A735-2DC0-434A-9CE1-0232F62848D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4A5FA2FC-419D-46E8-ACE3-929E5B39F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFA6A6A3-3847-4C0F-8415-7F036C86000D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"783AECE8-0875-4FDF-8885-E3665798CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6E99CB1B-C3EA-4C7C-8484-9192BC95403A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C7EC060D-B4E4-46B7-BB4B-6DDEF8094C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-135","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}