Fortinet Forticlient Enterprise Management Server — known CVE vulnerabilities

Every CVE whose affected-product data names Fortinet Forticlient Enterprise Management Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-48788 — CVSS 9.8 (critical) — actively exploited: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through…
• CVE-2023-45581 — CVSS 8.8 (high): An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an…
• CVE-2021-32592 — CVSS 7.8 (high): An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below…
• CVE-2024-33508 — CVSS 7.3 (high): An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS…
• CVE-2021-36189 — CVSS 6.8 (medium): A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to…
• CVE-2021-41030 — CVSS 5.4 (medium): An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may…
• CVE-2020-15940 — CVSS 4.1 (medium): An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a…