Forticlient Enterprise Management Server vulnerabilities

3 known vulnerabilities in Forticlient Enterprise Management Server from Fortinet. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  FortiClientEMS: Improper Neutralization of Special Elements used in a Command

  CVE-2024-33508Sep 10, 2024FortinetEPSS 1.29%

  An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations

• 9.8 Critical severity

  Fortinet FortiClient EMS SQL Injection Exploited

  CVE-2023-48788Mar 12, 2024FortinetEPSS 98.4%

  A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted pa

• 7.2 High severity

  FortiClientEMS: Improper Privilege Management

  CVE-2023-45581Feb 15, 2024Fortinet

  An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions,