CVE-2023-40723

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-407247.3A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attackeCVE-2023-407254.0A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages CVE-2023-407268.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive inforCVE-2023-407277.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak oCVE-2023-407287.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensCVE-2023-407297.4A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unCVE-2023-40738.8Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap cCVE-2023-407308.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks suffiCVE-2023-407318.8A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary filCVE-2023-407323.9A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not inCVE-2023-407357.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (ArchitectuCVE-2023-40748.8Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corru
CVE-2023-40723: High severity, CVSS 8.1 | Vulnix