Forticlient Endpoint Management Server
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Forticlient Endpoint Management Server (821ad29b-e5e6-522e-82c7-aa0d8c381190) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33508 |
vulnerable | 2026-06-08 06:37:31.428498 |
Details available
MEDIUM (6.9)
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.
Published: 2024-09-10T14:37:45.323Z
Updated: 2024-09-10T17:32:21.879Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21753 |
vulnerable | 2026-06-08 06:27:36.464759 |
Details available
MEDIUM (5.5)
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8, 1.2.1 through 1.2.5 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests
Published: 2024-09-10T14:37:48.466Z
Updated: 2024-09-10T18:58:32.329Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47534 |
vulnerable | 2026-06-08 06:14:24.841404 |
Details available
HIGH (8.7)
A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-03-12T15:09:19.802Z
Updated: 2024-08-12T18:01:16.372Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44172 |
vulnerable | 2026-06-08 05:36:45.078701 |
Details available
LOW (3.6)
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.
Published: 2023-09-13T12:30:09.839Z
Updated: 2024-09-24T19:55:20.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41028 |
vulnerable | 2026-06-08 05:35:19.517569 |
Details available
HIGH (8.2)
A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol.
Published: 2021-12-16T18:13:38.000Z
Updated: 2024-10-25T13:36:27.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24019 |
vulnerable | 2026-06-08 05:30:03.480099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15941 |
vulnerable | 2026-06-08 05:19:27.216813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.