{"id":"CVE-2023-47534","aliases":["EUVD-2023-51645","GHSA-452h-x3w8-jmmh"],"status":"published","title":"A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...","description":"A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.","severity":{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:R","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01051,"percentile":0.64524,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1236"],"published":"2024-03-12T15:09:19Z","modified":"2026-10-22T14:17:33Z","products":[{"vendor":"fortinet","product":"forticlient_endpoint_management_server"},{"vendor":"fortinet","product":"forticlientems"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-390","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47534"},{"url":"https://github.com/advisories/GHSA-452h-x3w8-jmmh"}],"sources":{"cve":[{"id":"CVE-2023-47534","description":"A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.","status":"published","published":"2024-03-12T15:09:19.802Z","modified":"2026-10-22T13:48:34.711Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:R","level":"high","assessor":"cna"}],"cwes":["CWE-1236"],"updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51645","description":"A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.","status":"published","published":"2024-03-12T15:09:19Z","modified":"2026-10-22T13:48:34Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:R","level":"high"}],"updated_at":"2026-11-02T16:59:35.198677Z"}],"ghsa":[{"id":"GHSA-452h-x3w8-jmmh","title":"A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...","description":"A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.","status":"published","published":"2024-03-12T15:32:21Z","modified":"2024-03-12T15:32:27Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-1236"],"updated_at":"2026-11-02T14:55:39.945482Z"}],"nvd":[{"id":"CVE-2023-47534","description":"A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.","status":"published","published":"2024-03-12T15:15:46.77Z","modified":"2026-10-22T14:17:33.987Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1236"],"updated_at":"2026-11-02T14:09:10.192572Z"}]}}