Fortinet FortiClientLinux
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-24018 | 7.4.0 – 7.4.4 ; 7.2.2 – 7.2.12 | A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2. | HIGH 7.8 | 0.2 % | ||
| CVE-2020-15934 | 6.4.0 ; 6.2.6 – 6.2.7 ; 6.2.0 – 6.2.4 ; … | An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. m | HIGH 8.6 | 0.2 % | ||
| CVE-2024-50570 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.7 ; 7.0.0 – 7.0.13 | A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 t | MEDIUM 5.0 | 0.1 % | ||
| CVE-2024-31489 | 7.2.0 ; 7.0.0 – 7.0.11 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLin | HIGH 8.1 | 0.4 % | ||
| CVE-2022-45856 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 ; 6.4.7 – 6.4.9 ; … | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 a | MEDIUM 5.9 | 0.2 % | ||
| CVE-2023-45590 | 7.2.0 ; 7.0.6 – 7.0.10 ; 7.0.3 – 7.0.4 | An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 thro | CRITICAL 9.4 | 1.5 % | ||
| CVE-2023-37939 | 7.2.0 ; 7.0.6 – 7.0.9 ; 7.0.0 – 7.0.4 ; … | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6. | LOW 3.3 | 0.3 % |