| CVE-2026-59836 |
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0…
|
6.7
Medium
|
Jul 14, 2026 |
| CVE-2026-39810 |
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to…
|
5.2
Medium
|
Apr 14, 2026 |
| CVE-2026-39809 |
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2026-35616 |
Exploited
Fortinet FortiClient EMS Improper Access Control Vulnerability
|
9.1
Critical
|
Apr 4, 2026 |
| CVE-2026-21643 |
Exploited
Fortinet SQL Injection Vulnerability
|
9.1
Critical
|
Feb 6, 2026 |
| CVE-2025-59922 |
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89]…
|
6.8
Medium
|
Jan 13, 2026 |
| CVE-2023-48786 |
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and…
|
4.1
Medium
|
Jun 10, 2025 |
| CVE-2024-32119 |
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an…
|
4.6
Medium
|
Jun 10, 2025 |
| CVE-2025-22859 |
A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0…
|
5.0
Medium
|
May 13, 2025 |
| CVE-2025-22855 |
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in…
|
2.6
Low
|
Apr 8, 2025 |
| CVE-2019-16149 |
An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote…
|
5.4
Medium
|
Mar 28, 2025 |
| CVE-2024-23106 |
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and…
|
7.7
High
|
Jan 14, 2025 |
| CVE-2024-36506 |
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0…
|
3.5
Low
|
Jan 14, 2025 |
| CVE-2024-36510 |
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all…
|
4.9
Medium
|
Jan 14, 2025 |
| CVE-2024-31489 |
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through…
|
6.4
Medium
|
Sep 10, 2024 |
| CVE-2024-21753 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
5.5
Medium
|
Sep 10, 2024 |
| CVE-2024-33508 |
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in…
|
6.9
Medium
|
Sep 10, 2024 |
| CVE-2023-47534 |
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through…
|
8.7
High
|
Mar 12, 2024 |
| CVE-2023-48788 |
Exploited
Fortinet FortiClient EMS SQL Injection Vulnerability
|
9.3
Critical
|
Mar 12, 2024 |
| CVE-2023-45581 |
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2,…
|
7.9
High
|
Feb 15, 2024 |
| CVE-2021-44172 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0…
|
3.6
Low
|
Sep 13, 2023 |
| CVE-2020-9287 |
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via…
|
7.5
High
|
Mar 15, 2020 |