Vulnerabilidades do Fortinet Forticlientems
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fortinet Forticlientems: 8 registro(s), com versões afetadas e correções.cpe:2.3:a:fortinet:forticlientems
CVE-2026-59836
Crítica · 9.8
CWE-295 14/07/2026
Improper Certificate Validation em Fortinet Forticlientems
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
CVE-2026-39810
Média · 5.5
CWE-321 14/04/2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0…
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.
CVE-2026-39809
Média · 6.7
CWE-89 14/04/2026
SQL Injection em Fortinet Forticlientems
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted requests
CVE-2026-35616
Crítica · 9.8
KEV Urgente · 72 Exploit público CWE-284 03/04/2026
Fortinet FortiClient EMS Improper Access Control Vulnerability
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
CVE-2026-21643
Crítica · 9.8
KEV Urgente · 73 Exploit público CWE-89 06/02/2026
Fortinet FortiClient EMS SQL Injection Vulnerability
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVE-2025-59922
Alta · 7.2
CWE-89 13/01/2026
SQL Injection em Fortinet Forticlientems
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.
CVE-2023-48788
Crítica · 9.8
KEV Urgente · 100 Exploit público Ransomware CWE-89 12/03/2024
Fortinet FortiClient EMS SQL Injection Vulnerability
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2020-9287
Alta · 7.8
CWE-426 15/03/2020
Untrusted Search Path em Fortinet Forticlient Emergency Management Server
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable