Fortinet FortiClient 7.0.0 for Windows
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*
part: a version: 7.0.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Forticlient (f1dedd21-b015-56f2-acb3-24cd61ec013c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41028 |
vulnerable | 2026-06-08 05:35:19.514385 |
Details available
HIGH (8.2)
A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol.
Published: 2021-12-16T18:13:38.000Z
Updated: 2024-10-25T13:36:27.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36167 |
vulnerable | 2026-06-08 05:32:49.833030 |
Details available
MEDIUM (4.3)
An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater.
Published: 2021-12-09T09:33:17.000Z
Updated: 2024-10-25T13:37:00.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32592 |
vulnerable | 2026-06-08 05:32:07.630443 |
Details available
HIGH (7.8)
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.
Published: 2021-12-01T11:27:11.000Z
Updated: 2024-10-25T13:42:58.082Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.