Forticlient
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Forticlient (f1dedd21-b015-56f2-acb3-24cd61ec013c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | linux |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24018 |
vulnerable | 2026-06-08 07:51:16.587419 |
Details available
HIGH (7.4)
A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.
Published: 2026-03-10T16:44:14.285Z
Updated: 2026-03-11T13:08:18.944Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50570 |
vulnerable | 2026-06-08 06:52:10.874087 |
Details available
MEDIUM (4.9)
A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector
Published: 2024-12-18T12:44:38.644Z
Updated: 2025-08-27T21:29:14.762Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3661 |
vulnerable | 2026-06-08 06:43:51.123267 |
DHCP routing options can manipulate interface-based VPN traffic
HIGH (7.6)
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Published: 2024-05-06T18:31:21.217Z
Updated: 2024-08-28T19:09:06.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31489 |
vulnerable | 2026-06-08 06:35:31.777116 |
Details available
MEDIUM (6.4)
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation
Published: 2024-09-10T14:37:48.066Z
Updated: 2024-09-10T17:52:01.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45590 |
vulnerable | 2026-06-08 06:12:42.873203 |
Details available
CRITICAL (9.4)
An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website
Published: 2024-04-09T14:24:19.922Z
Updated: 2024-08-12T17:46:37.654Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37939 |
vulnerable | 2026-06-08 06:08:16.470979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45856 |
vulnerable | 2026-06-08 05:50:37.400501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44167 |
vulnerable | 2026-06-08 05:36:45.070818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43205 |
vulnerable | 2026-06-08 05:36:42.439523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41028 |
vulnerable | 2026-06-08 05:35:19.512062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22127 |
vulnerable | 2026-06-08 05:29:59.891915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15934 |
vulnerable | 2026-06-08 05:19:27.204173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17652 |
vulnerable | 2026-06-08 05:13:10.913447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16155 |
vulnerable | 2026-06-08 05:13:07.813489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16152 |
vulnerable | 2026-06-08 05:13:07.809524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15711 |
vulnerable | 2026-06-08 05:12:57.868607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.