Forticlient Enterprise Management Server
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Forticlient Enterprise Management Server (ac5e4dac-7823-5f70-b9f3-815f7b99b50f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33508 |
vulnerable | 2026-06-08 06:37:31.430007 |
Details available
MEDIUM (6.9)
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.
Published: 2024-09-10T14:37:45.323Z
Updated: 2024-09-10T17:32:21.879Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48788 |
vulnerable | 2026-06-08 06:14:28.059770 |
Details available
CRITICAL (9.3)
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-03-12T15:09:18.527Z
Updated: 2025-10-21T23:05:23.092Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45581 |
vulnerable | 2026-06-08 06:12:42.738684 |
Details available
HIGH (7.9)
An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.
Published: 2024-02-15T13:59:23.728Z
Updated: 2024-08-02T20:21:16.534Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41030 |
vulnerable | 2026-06-08 05:35:19.523197 |
Details available
MEDIUM (5.4)
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.
Published: 2021-12-08T17:51:12.000Z
Updated: 2024-10-25T13:39:00.180Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36189 |
vulnerable | 2026-06-08 05:32:49.883706 |
Details available
MEDIUM (6.8)
A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data
Published: 2021-12-09T09:10:03.000Z
Updated: 2024-10-25T13:37:43.372Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32592 |
vulnerable | 2026-06-08 05:32:07.631295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15940 |
vulnerable | 2026-06-08 05:19:27.215478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.