CVE Watch—

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

98.4%

p100

KEV

SIM

25 de mar. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

98.4%EPSS · 30 dias98.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Fortinet / FortiClient EMS

Vulnerabilidade

Fortinet FortiClient EMS SQL Injection Vulnerability

Adicionado ao KEV

25 de mar. de 2024

Corrigir até

15 de abr. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.fortiguard.com/psirt/FG-IR-24-007; https://nvd.nist.gov/vuln/detail/CVE-2023-48788

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-356169.8 CRÍ

99.8%

KEV—80Fortinet FortiClient EMS Improper Access Control Vulnerability104d CVE-2026-21643—

99.9%

KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—