FE
Product
Forticlient Endpoint Management Server
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add Forticlient Endpoint Management Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24019 | 9.8 | Oct 6 | An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user… Affected: before 6.2.9; 6.4.0 before 6.4.2 |
| CVE-2023-47534 | 8.8 | Mar 12 | A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4… Affected: 6.0.0 through 6.0.8; 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 through 7.0.10; 7.2.0 through 7.2.2 |
| CVE-2021-41028 | 7.5 | Dec 16 | A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation… Affected: 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0; 7.0.1 |
| CVE-2024-33508 | 7.3 | Sep 10 | An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12… Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.12 |
| CVE-2024-21753 | 6.0 | Sep 10 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions,… Affected: 1.2.1 through 1.2.5; 6.0.0 through 6.0.8; 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 through 7.0.13; 7.2.0 through 7.2.4 |
| CVE-2020-15941 | 5.4 | Oct 6 | A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character… Affected: before 6.2.9; 6.4.0 before 6.4.2 |
| CVE-2021-44172 | 5.3 | Sep 13 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2… Affected: 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 through 7.0.4; 7.0.6 through 7.0.7 |
Showing 7