CVE Watch—

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

98.4%

p100

KEV

SÍ

25 mar 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

98.4%EPSS · 30 días98.4%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Fortinet / FortiClient EMS

Vulnerabilidad

Fortinet FortiClient EMS SQL Injection Vulnerability

Añadido a KEV

25 mar 2024

Remediar antes de

15 abr 2024

Uso conocido en ransomware

Sí

Descripción resumida

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.fortiguard.com/psirt/FG-IR-24-007; https://nvd.nist.gov/vuln/detail/CVE-2023-48788

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-356169.8 CRÍ

95.2%

KEV—79Fortinet FortiClient EMS Improper Access Control Vulnerability83d CVE-2026-21643—

99.8%

KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—