FortiClientEMS at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 1 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 1 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 3 | 1 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 1 | 1 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 2 | 0 |
| May 2025 | 1 | 0 |
| Apr 2025 | 1 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 3 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
High max 9.1NCSC-2026-0486 2 CVEs
Kwetsbaarheden verholpen in Fortinet FortiClient en FortiClientEMS
Fortinet heeft kwetsbaarheden verholpen in FortiClient en FortiClientEMS.
-
High max 6.7NCSC-2026-0243 1 CVE
Kwetsbaarheid verholpen in Fortinet FortiClient EMS
Fortinet heeft een kwetsbaarheid verholpen in FortiClient EMS versies 7.2 tot en met 7.4.5.
-
High max 9.1
Kwetsbaarheid verholpen in Fortinet FortiClient EMS
Fortinet heeft een kwetsbaarheid verholpen in FortiClient EMS (versie 7.4.4).
first Feb 9, 2026 -
High max 6.5NCSC-2025-0192 11 CVEs
Kwetsbaarheden verholpen in Fortinet FortiOS
Fortinet heeft kwetsbaarheden verholpen in FortiOS.
23 results · Feed
-
Medium 6.3
A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.…
-
Medium 6.7
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 th…
-
Medium 5.2
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.…
-
Medium 6.2
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC…
-
Critical 9.1
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated att…
KEV Apr 6, 2026 -
Critical 9.1
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet Forti…
KEV Apr 13, 2026 -
Medium 6.8
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerab…
-
Medium 4.1
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before…
-
Medium 4.6
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an …
-
Medium 5.0
A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 t…
-
Low 2.6
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Forti…
-
Medium 5.4
An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attac…
-
High 7.7
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 an…
-
Low 3.5
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 th…
-
Medium 4.9
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versio…
-
Medium 6.4
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.…
-
Medium 5.5
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientE…
-
Medium 6.9
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortin…
-
High 8.7
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.…
-
Critical 9.3
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versi…
KEV Mar 25, 2024 -
High 7.9
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, …
-
Low 3.6
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 …
-
High 7.5
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo…