5.5
Medium
CVE-2024-21753 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions, FortiClientEMS 01.02.02 through 01.02.05 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientEMS 7.2 | 7.2.0 → 7.2.4 | No fix stated |
| FortiClientEMS 7.0 | 7.0.0 → 7.0.13 | No fix stated |
| FortiClientEMS 6.4 | 6.4.0 → 6.4.9 | No fix stated |
| FortiClientEMS 6.2 | 6.2.3 → 6.2.9 | No fix stated |
| FortiClientEMS 06.02 | 06.02.00 → 06.02.02 | No fix stated |
| FortiClientEMS | 6.0.8 | No fix stated |
| FortiClientEMS 06.00 | 06.00.00 → 06.00.06 | No fix stated |
| FortiClientEMS 01.02 | 01.02.02 → 01.02.05 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientEMS
The 22 CVEs of FortiClientEMS →
CVE-2026-59836
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0…
6.7
Medium
CVE-2026-39810
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to…
5.2
Medium
CVE-2026-39809
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
6.2
Medium
CVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability
9.1
Critical