Description
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiClientEMS | Fortinet / FortiClientEMS | >= 7.0.1, <= 7.0.10 | affected |
| FortiClientEMS | Fortinet / FortiClientEMS | >= 7.2.0, <= 7.2.2 | affected |
| forticlient_enterprise_management_server | fortinet / forticlient_enterprise_management_server | >= 7.0.1, <= 7.0.10 | affected |
| forticlient_enterprise_management_server | fortinet / forticlient_enterprise_management_server | >= 7.0.1, <= 7.0.10 | affected |
| forticlient_enterprise_management_server | fortinet / forticlient_enterprise_management_server | >= 7.2.0, <= 7.2.2 | affected |
| forticlient_enterprise_management_server | fortinet / forticlient_enterprise_management_server | >= 7.2.0, <= 7.2.2 | affected |