Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductForticlientems (cf2a6e8d-f111-50f4-af1c-d809cde0126d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59922 vulnerable 2026-06-08 07:35:23.457832 Details available
MEDIUM (6.8)
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.
Published: 2026-01-13T16:32:28.715Z
Updated: 2026-01-14T09:16:14.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.