What’s Vulnerable › Vulnerabilities

CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2024-03-25
• EPSS: 98.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-12 · updated 2026-06-17
• Weakness: CWE-89

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected products

• Fortinet Forticlient Enterprise Management Server: from 7.0.1 before 7.0.11; from 7.2.0 before 7.2.3 — fixed in 7.0.11, 7.2.3

How to fix

Upgrade to a fixed version: Fortinet Forticlient Enterprise Management Server 7.0.11, 7.2.3. Check the vendor advisory for mitigations.

References

• https://fortiguard.com/psirt/FG-IR-24-007
• https://fortiguard.com/psirt/FG-IR-24-007
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788

Get alerted when CVE-2023-48788 or the next vulnerability affects your stack