Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:forticlientwindows:7.0.14:*:*:*:*:*:*:*

part: a version: 7.0.14 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductForticlientwindows (578fa840-5b2d-5798-8efe-4fc80a1e8def)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62676 vulnerable 2026-06-08 07:39:16.428758 Details available
MEDIUM (6.4)
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.
Published: 2026-02-10T15:39:12.816Z
Updated: 2026-02-26T15:04:10.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57716 vulnerable 2026-06-08 07:33:16.011449 Details available
MEDIUM (6)
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.
Published: 2025-10-14T15:23:10.215Z
Updated: 2026-02-26T17:47:32.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54660 vulnerable 2026-06-08 07:33:13.029221 Details available
MEDIUM (4.9)
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
Published: 2025-11-18T17:01:18.577Z
Updated: 2026-01-14T09:19:45.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24473 vulnerable 2026-06-08 07:12:49.272215 Details available
MEDIUM (4.8)
A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)
Published: 2025-05-28T07:55:57.065Z
Updated: 2026-01-14T09:15:52.786Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.