| CVE-2026-59836 |
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0…
|
6.7
Moyenne
|
14 juil. 2026 |
| CVE-2026-39810 |
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to…
|
5.2
Moyenne
|
14 avr. 2026 |
| CVE-2026-39809 |
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
|
6.2
Moyenne
|
14 avr. 2026 |
| CVE-2026-35616 |
Exploitée
Fortinet FortiClient EMS Improper Access Control Vulnerability
|
9.1
Critique
|
4 avr. 2026 |
| CVE-2026-21643 |
Exploitée
Fortinet SQL Injection Vulnerability
|
9.1
Critique
|
6 févr. 2026 |
| CVE-2025-59922 |
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89]…
|
6.8
Moyenne
|
13 janv. 2026 |
| CVE-2023-48786 |
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and…
|
4.1
Moyenne
|
10 juin 2025 |
| CVE-2024-32119 |
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an…
|
4.6
Moyenne
|
10 juin 2025 |
| CVE-2025-22859 |
A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0…
|
5.0
Moyenne
|
13 mai 2025 |
| CVE-2025-22855 |
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in…
|
2.6
Faible
|
8 avr. 2025 |
| CVE-2019-16149 |
An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote…
|
5.4
Moyenne
|
28 mars 2025 |
| CVE-2024-23106 |
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and…
|
7.7
Élevée
|
14 janv. 2025 |
| CVE-2024-36506 |
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0…
|
3.5
Faible
|
14 janv. 2025 |
| CVE-2024-36510 |
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all…
|
4.9
Moyenne
|
14 janv. 2025 |
| CVE-2024-31489 |
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through…
|
6.4
Moyenne
|
10 sept. 2024 |
| CVE-2024-21753 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
5.5
Moyenne
|
10 sept. 2024 |
| CVE-2024-33508 |
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in…
|
6.9
Moyenne
|
10 sept. 2024 |
| CVE-2023-47534 |
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through…
|
8.7
Élevée
|
12 mars 2024 |
| CVE-2023-48788 |
Exploitée
Fortinet FortiClient EMS SQL Injection Vulnerability
|
9.3
Critique
|
12 mars 2024 |
| CVE-2023-45581 |
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2,…
|
7.9
Élevée
|
15 févr. 2024 |
| CVE-2021-44172 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0…
|
3.6
Faible
|
13 sept. 2023 |
| CVE-2020-9287 |
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via…
|
7.5
Élevée
|
15 mars 2020 |