Fortinet FortiClientEMS

Name: Fortinet FortiClientEMS
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical5high11medium1low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48788US	critical9.8OT critical	98.4% (100th)	KEV	no fix	2024-03-12	2 versions
CVE-2026-21643US	—OT critical	97.7% (100th)	KEV	no fix	2026-02-06	2 versions
CVE-2026-35616US	—OT critical	94.0% (100th)	KEV	no fix	2026-04-04	≤ 7.4.5 ≤7.4.6
CVE-2024-50562US	—	1.16% (67th)	Exploit	no fix	2025-06-10	3 versions
CVE-2025-59922US	—	7.76% (95th)	—	no fix	2026-01-13	4 versions
CVE-2024-33508US	high7.3	1.29% (70th)	—	no fix	2024-09-10	2 versions
CVE-2023-47534US	high8.8	1.05% (64th)	—	no fix	2024-03-12	8 versions
CVE-2024-23106US	critical9.8	0.95% (61st)	—	no fix	2025-01-14	6 versions
CVE-2023-45581US	high7.2	0.88% (59th)	—	no fix	2024-02-15	7 versions
CVE-2021-44172US	medium5.3	0.85% (58th)	—	no fix	2023-09-13	6 versions
CVE-2025-22254US	high7.2	0.85% (58th)	—	no fix	2025-06-10	3 versions
CVE-2024-21753US	medium6.0	0.80% (56th)	—	no fix	2024-09-10	9 versions
CVE-2024-36510US	medium5.3	0.75% (55th)	—	no fix	2025-01-14	2 versions
CVE-2025-22859US	—	0.60% (49th)	—	no fix	2025-05-13	≤ 7.4.0 ≤7.4.1
CVE-2025-25250US	medium4.3	0.55% (46th)	—	no fix	2025-06-10	3 versions
CVE-2024-36506US	medium5.3	0.52% (44th)	—	no fix	2025-01-14	5 versions
CVE-2024-50568US	—	0.45% (39th)	—	no fix	2025-06-10	3 versions
CVE-2025-22251US	medium5.3	0.40% (34th)	—	no fix	2025-06-10	3 versions
CVE-2025-24471US	—	0.38% (31st)	—	no fix	2025-06-10	3 versions
CVE-2024-31489US	high8.1	0.36% (30th)	—	no fix	2024-09-10	≤ 7.0.0 ≤7.0.13
CVE-2025-22855US	medium4.8	0.36% (30th)	—	no fix	2025-04-08	2 versions
CVE-2023-48786US	—	0.34% (27th)	—	no fix	2025-06-10	7 versions
CVE-2024-32119US	—	0.33% (25th)	—	no fix	2025-06-10	10 versions
CVE-2019-16149US	medium6.1	0.29% (21st)	—	no fix	2025-03-28	≤ 6.2.0
CVE-2025-22862US	medium6.7OT elevated	0.25% (17th)	—	no fix	2025-10-02	3 versions
CVE-2026-59836US	critical9.8	0.22% (13th)	—	no fix	2026-07-14	5 versions
CVE-2023-29184US	low2.3	0.21% (11th)	—	no fix	2025-06-10	3 versions
CVE-2024-54019US	medium6.5	0.17% (6th)	—	no fix	2025-06-10	3 versions
CVE-2026-39809US	—	0.13% (3rd)	—	no fix	2026-04-14	2 versions
CVE-2026-39810US	medium5.5OT elevated	0.10% (1st)	—	no fix	2026-04-14	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-203Observable Discrepancy1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs
NLNCSC-NL (CSAF)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan