Fortinet Forticlientems
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_forticlientems:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Forticlientems (a3b2f178-9427-58b2-85f5-66dad85fd92b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41030 |
vulnerable | 2026-06-08 05:35:19.522511 |
Details available
MEDIUM (5.4)
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.
Published: 2021-12-08T17:51:12.000Z
Updated: 2024-10-25T13:39:00.180Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36189 |
vulnerable | 2026-06-08 05:32:49.882920 |
Details available
MEDIUM (6.8)
A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data
Published: 2021-12-09T09:10:03.000Z
Updated: 2024-10-25T13:37:43.372Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24019 |
vulnerable | 2026-06-08 05:30:03.479358 |
Details available
HIGH (8.1)
An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)
Published: 2021-10-06T09:41:10.000Z
Updated: 2024-10-22T21:02:02.463Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15941 |
vulnerable | 2026-06-08 05:19:27.215989 |
Details available
MEDIUM (5.4)
A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.
Published: 2021-10-06T09:27:32.000Z
Updated: 2024-10-25T13:49:17.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15940 |
vulnerable | 2026-06-08 05:19:27.214932 |
Details available
MEDIUM (4.1)
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server.
Published: 2021-11-02T17:49:37.000Z
Updated: 2024-10-25T13:48:08.458Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.