Fortinet FortiClientEMS
22 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-59836 | 7.4.3 – 7.4.5 ; 7.4.0 – 7.4.1 ; 7.2.12 – 7.2.14 ; … | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCli | CRITICAL 9.8 | 0.2 % | ||
| CVE-2026-39810 | 7.4.3 – 7.4.5 ; 7.4.0 – 7.4.1 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-39809 | 7.4.3 – 7.4.4 ; 7.4.0 – 7.4.1 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-35616 | 7.4.5 – 7.4.6 | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau | CRITICAL 9.8 | 94 % | KEV | |
| CVE-2026-21643 | 7.4.4 | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a | CRITICAL 9.8 | 98 % | KEV | |
| CVE-2025-59922 | 7.4.3 – 7.4.4 ; 7.4.0 – 7.4.1 ; 7.2.0 – 7.2.10 ; … | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For | HIGH 7.2 | 7.8 % | ||
| CVE-2023-48786 | 7.2.0 – 7.2.2 ; 7.0.0 – 7.0.13 ; 6.4.7 – 6.4.9 ; … | A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an a | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-32119 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 ; … | An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attac | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-22859 | 7.4.0 – 7.4.1 | A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allo | MEDIUM 5.3 | 0.6 % | ||
| CVE-2025-22855 | 7.4.0 – 7.4.1 ; 7.2.1 – 7.2.8 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient befor | MEDIUM 4.8 | 0.4 % | ||
| CVE-2019-16149 | 6.2.0 | An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unauth | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-23106 | 7.2.0 – 7.2.3 ; 7.0.0 – 7.0.10 ; 6.4.7 – 6.4.9 ; … | An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allow | CRITICAL 9.8 | 1.0 % | ||
| CVE-2024-36506 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 ; … | An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all | MEDIUM 5.3 | 0.5 % | ||
| CVE-2024-36510 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 | An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5 | MEDIUM 5.3 | 0.7 % | ||
| CVE-2024-31489 | 7.0.0 – 7.0.13 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLin | HIGH 8.1 | 0.4 % | ||
| CVE-2024-21753 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 ; 6.4.7 – 6.4.9 ; … | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2. | MEDIUM 6.0 | 0.8 % | ||
| CVE-2024-33508 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.12 | An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2 | HIGH 7.3 | 1.3 % | ||
| CVE-2023-47534 | 7.2.0 – 7.2.2 ; 7.0.0 – 7.0.10 ; 6.4.7 – 6.4.9 ; … | A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0 | HIGH 8.8 | 1.1 % | ||
| CVE-2023-48788 | 7.2.0 – 7.2.2 ; 7.0.1 – 7.0.10 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2. | CRITICAL 9.8 | 98 % | KEV | |
| CVE-2023-45581 | 7.2.0 – 7.2.2 ; 7.0.6 – 7.0.10 ; 7.0.0 – 7.0.4 ; … | An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 | HIGH 7.9 | 0.9 % | ||
| CVE-2021-44172 | 7.0.6 – 7.0.7 ; 7.0.0 – 7.0.4 ; 6.4.7 – 6.4.9 ; … | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-9287 | 06.02.00 – 06.02.01 ; 6.0.8 ; 06.00.00 – 06.00.06 ; … | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable | HIGH 7.8 | 0.4 % |