Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_forticlient_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortinet Forticlient For Windows (40c41677-6d5b-5dff-ab96-2e35fc2e2aae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9291 vulnerable 2026-06-08 05:27:21.115566 Details available
MEDIUM (6.3)
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.
Published: 2020-06-01T18:39:42.000Z
Updated: 2024-10-25T14:01:40.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9290 vulnerable 2026-06-08 05:27:21.113406 Details available
An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
Published: 2020-03-15T21:52:05.000Z
Updated: 2024-10-25T14:26:32.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5589 vulnerable 2026-06-08 05:14:07.765829 Details available
An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files in that directory.
Published: 2019-05-28T21:42:19.000Z
Updated: 2024-10-25T14:30:07.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9191 vulnerable 2026-06-08 05:12:07.922383 Details available
A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates.
Published: 2019-05-30T16:27:18.000Z
Updated: 2024-10-25T14:29:42.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13368 vulnerable 2026-06-08 05:10:51.196816 Details available
A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection.
Published: 2019-05-30T16:27:34.000Z
Updated: 2024-10-25T14:29:31.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.