Skip to content

Fortinet Forticlientems vulnerabilities

fortinet forticlientemsA execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7...CVE-2026-1215276.3 MediumNovember 11, 2026
fortinet forticlientemsA improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5,...CVE-2026-598366.7 MediumJuly 14, 2026
fortinet forticlientemsA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4...CVE-2026-398105.2 MediumApril 14, 2026
fortinet forticlientemsA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-398096.2 MediumApril 14, 2026
fortinet forticlientems, forticlient ems +1 moreA improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow...CVE-2026-35616In KEVPublic exploitEPSS 94.0%9.1 CriticalApril 4, 2026
fortinet forticlientems, forticlient ems +1 moreAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-21643In KEVPublic exploitEPSS 97.7%9.1 CriticalFebruary 6, 2026
fortinet forticlientemsAn improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2025-599226.8 MediumJanuary 13, 2026
fortinet forticlientemsA server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0...CVE-2023-487864.1 MediumJune 10, 2025
fortinet forticlientemsAn improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and...CVE-2024-321194.6 MediumJune 10, 2025
fortinet forticlientems, forticlientems cloud +1 moreA Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and...CVE-2025-228595.0 MediumMay 13, 2025
fortinet forticlientemsAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2025-228552.6 LowApril 8, 2025
fortinet forticlientemsAn Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0...CVE-2019-161495.4 MediumMarch 28, 2025
fortinet forticlientemsAn improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version...CVE-2024-231067.7 HighJanuary 14, 2025
fortinet forticlientems, forticlientems cloud +1 moreAn improper verification of source of a communication channel vulnerability [CWE-940] in...CVE-2024-365063.5 LowJanuary 14, 2025
fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...CVE-2024-365104.9 MediumJanuary 14, 2025
fortinet forticlient, forticlientlinux, forticlientmac +2 more +4 moreAAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7...CVE-2024-314896.4 MediumSeptember 10, 2024
fortinet forticlientems, forticlient endpoint management server +1 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-217535.5 MediumSeptember 10, 2024
fortinet forticlientems, forticlient endpoint management server, forticlient enterprise management server +2 moreAn improper neutralization of special elements used in a command ('Command Injection')...CVE-2024-335086.9 MediumSeptember 10, 2024
fortinet forticlientems, forticlient endpoint management server +1 moreA improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7...CVE-2023-475348.7 HighMarch 12, 2024
fortinet forticlientems, forticlient ems, forticlient enterprise management server +2 moreA improper neutralization of special elements used in an sql command ('sql injection') in...CVE-2023-48788In KEVPublic exploitEPSS 98.4%9.3 CriticalMarch 12, 2024
fortinet forticlientems, forticlient enterprise management server +1 moreAn improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0...CVE-2023-455817.9 HighFebruary 15, 2024
fortinet forticlientems, forticlient endpoint management server +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...CVE-2021-441723.6 LowSeptember 13, 2023
fortinet forticlient, forticlient endpoint management server, forticlientems, forticlientwindows, forticlientlinux, forticlientmac +2 moreA combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS...CVE-2021-410288.2 HighDecember 16, 2021
fortinet forticlientems, forticlient enterprise management server +1 moreA missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below,...CVE-2021-361896.8 MediumDecember 9, 2021
fortinet forticlient enterprise management server, forticlientems +1 moreAn authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7...CVE-2021-410305.4 MediumDecember 8, 2021
fortinet forticlient, forticlient enterprise management server, forticlientwindows, forticlientems +2 moreAn unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x...CVE-2021-325927.8 HighDecember 1, 2021
fortinet forticlientems, forticlient enterprise management server +1 moreAn improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and...CVE-2020-159404.1 MediumNovember 2, 2021
fortinet forticlientems, forticlient endpoint management server +1 moreAn insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and...CVE-2021-24019Public exploit8.1 HighOctober 6, 2021
fortinet forticlientems, forticlient endpoint management server +1 moreA path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and...CVE-2020-159415.4 MediumOctober 6, 2021
fortinet forticlient emergency management server, forticlientems +1 moreAn Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow...CVE-2020-92877.5 HighMarch 15, 2020