fortinet forticlient enterprise management server vulnerabilities and exploits

(subscribe to this query)

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows malicious user to information disclosure via inspecting browser decrypted data

Fortinet Forticlient Enterprise Management Server Fortinet Forticlient Enterprise Management Server 6.4.6 Fortinet Forticlient Enterprise Management Server 7.0.0 Fortinet Forticlient Enterprise Management Server 7.0.1

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an malicious user to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the sear...

Fortinet Forticlient Fortinet Forticlient 7.0.0 Fortinet Forticlient Enterprise Management Server Fortinet Forticlient Enterprise Management Server 7.0.0

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated malicious user to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

Fortinet Forticlient Enterprise Management Server Fortinet Forticlient Enterprise Management Server 7.0.0 Fortinet Forticlient Enterprise Management Server 7.0.1

An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 up to and including 7.2.2 and prior to 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted H...

Fortinet Forticlient Enterprise Management Server

An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated malicious user to inject malicious script/tags via the name parameter of various sections of the server.

Fortinet Forticlient Enterprise Management Server

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 up to and including 7.2.2, FortiClientEMS 7.0.1 up to and including 7.0.10 allows malicious user to execute unauthorized code or commands via ...

Fortinet Forticlient Enterprise Management Server

6 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook