Skip to content
Sign in
5.5 Medium

CVE-2024-21753 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions, FortiClientEMS 01.02.02 through 01.02.05 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests

Affected products and versions

Product Affected versions Fixed in
FortiClientEMS 7.2 7.2.0 → 7.2.4 No fix stated
FortiClientEMS 7.0 7.0.0 → 7.0.13 No fix stated
FortiClientEMS 6.4 6.4.0 → 6.4.9 No fix stated
FortiClientEMS 6.2 6.2.3 → 6.2.9 No fix stated
FortiClientEMS 06.02 06.02.00 → 06.02.02 No fix stated
FortiClientEMS 6.0.8 No fix stated
FortiClientEMS 06.00 06.00.00 → 06.00.06 No fix stated
FortiClientEMS 01.02 01.02.02 → 01.02.05 No fix stated

Other CVEs of FortiClientEMS

The 22 CVEs of FortiClientEMS →
CVE-2026-59836 A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0… 6.7 Medium CVE-2026-39810 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0… 5.2 Medium CVE-2026-39809 A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 6.2 Medium CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability 9.1 Critical
Track this CVE