fortinet forticlient endpoint management server

Name: fortinet forticlient endpoint management server
Brand: fortinet

productUS

cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high3medium0low

updated 2026-10-24

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-24019US	critical9.8	3.90% (90th)	Exploit	6.2.9	2021-10-06	2 versions
CVE-2020-15941US	medium5.4	1.15% (67th)	—	6.4.2	2021-10-06	2 versions
CVE-2023-47534US	high8.8	1.05% (64th)	—	no fix	2024-03-12	5 versions
CVE-2021-44172US	medium5.3	0.85% (58th)	—	no fix	2023-09-13	4 versions
CVE-2024-21753US	medium6.0	0.74% (54th)	—	no fix	2024-09-10	6 versions
CVE-2021-41028US	high7.5OT elevated	0.23% (13th)	—	no fix	2021-12-16	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.