FE
Product
Forticlient Enterprise Management Server
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Forticlient Enterprise Management Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-48788 RansomwareIn wildKEV | 9.8 | Mar 12 | Fortinet FortiClient EMS SQL Injection Vulnerability Affected: 7.0.1 before 7.0.11; 7.2.0 before 7.2.3 |
| CVE-2021-41030 | 9.1 | Dec 8 | An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to… Affected: 6.2.0 through 6.2.9; 6.4.0 through 6.4.4; 7.0.0; 7.0.1 |
| CVE-2021-32592 | 7.8 | Dec 1 | An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to… Affected: 6.0.0 through 6.0.6; 6.2.0 through 6.2.9; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2024-33508 | 7.3 | Sep 10 | An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12… Affected: 7.0.0 before 7.0.13; 7.2.0 before 7.2.5 |
| CVE-2023-45581 | 7.2 | Feb 15 | An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0… Affected: before 7.0.10; 7.2.0 through 7.2.2 |
| CVE-2020-15940 | 5.4 | Nov 2 | An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject… Affected: 6.0.0 through 6.0.8; 6.2.0 through 6.2.9; 6.4.0 through 6.4.1 |
| CVE-2021-36189 | 4.9 | Dec 9 | A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser… Affected: 6.4.0 through 6.4.4; 6.4.6; 7.0.0; 7.0.1 |
Showing 7