FO
Product
FortiClientEMS
by Fortinet · last CVE Jul 14, 2026
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 10Low 0
Watch

Add FortiClientEMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47534
8.8
1%
Mar 12
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4…
Affected: 7.2.0 through 7.2.2; 7.0.0 through 7.0.10; 6.4.7 through 6.4.9; 6.4.0 through 6.4.4; 6.2.6 through 6.2.9; 6.2.3 through 6.2.4; +3 more
CVE-2024-31489
8.1
0%
Sep 10
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and…
Affected: 7.0.0 through 7.0.13
CVE-2020-9287
7.8
0%
Mar 15
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Affected: 06.02.00 through 06.02.01; 6.0.8; 06.00.00 through 06.00.06; 6.0.0 before 6.0.*
CVE-2024-33508
7.3
1%
Sep 10
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12…
Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.12
CVE-2025-59922
7.2
8%
Jan 13
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4,…
Affected: 7.0.0 before 7.2.12; 7.4.0 before 7.4.5
CVE-2023-45581
7.2
1%
Feb 15
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0…
Affected: 7.2.0 through 7.2.2; 7.0.6 through 7.0.10; 7.0.0 through 7.0.4; 6.4.7 through 6.4.9; 6.4.0 through 6.4.4; 6.2.6 through 6.2.9; +2 more
Showing 6