Critical severity · published Mar 12, 2024
CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
RansomwareIn wildKEV
9.8
CVSS
98.4%
EPSS
Yes
On KEV
Description
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)98.4% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2024
Federal remediation dueApr 15, 2024
Ransomware campaign useKnown
Affected products
Which versions
FO
FortiClientEMS · Fortinet
7.2.0 through 7.2.2; 7.0.1 through 7.0.10 · source: vendor
FE
Forticlient Enterprise Management Server · Fortinet
7.0.1 before 7.0.11; 7.2.0 before 7.2.3 · source: NVD, CISA
FE
FortiClient EMS · Fortinet
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-48788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-48788
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
fortiguard.com
https://fortiguard.com/psirt/FG-IR-24-007
More from FortiClientEMS
9.8
CVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability
9.8
CVE-2026-21643
Fortinet FortiClient EMS SQL Injection Vulnerability
9.8
CVE-2026-59836
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow…
9.8
CVE-2024-23106
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a…
8.8
CVE-2023-47534
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4…