fortinet forticlientems

Name: fortinet forticlientems
Brand: fortinet

productUS

cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical0high5medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21643US	—OT critical	97.7% (100th)	KEV	no fix	2026-02-06	= 7.4.4
CVE-2026-35616US	—OT critical	94.0% (100th)	KEV	no fix	2026-04-04	2 versions
CVE-2025-59922US	—	7.76% (95th)	—	7.4.5	2026-01-13	2 versions
CVE-2024-23106US	critical9.8	0.95% (61st)	—	7.0.11	2025-01-14	4 versions
CVE-2024-36510US	medium5.3	0.75% (55th)	—	7.2.5	2025-01-14	2 versions
CVE-2025-22859US	—	0.60% (49th)	—	7.4.3	2025-05-13	7.4.0 → 7.4.3
CVE-2024-36506US	medium5.3	0.52% (44th)	—	7.2.5	2025-01-14	2 versions
CVE-2025-22855US	medium4.8	0.36% (30th)	—	7.4.3	2025-04-08	2 versions
CVE-2023-48786US	—	0.34% (27th)	—	7.4.3	2025-06-10	4 versions
CVE-2024-32119US	—	0.33% (25th)	—	7.2.5	2025-06-10	5 versions
CVE-2019-16149US	medium6.1	0.29% (21st)	—	6.2.1	2025-03-28	< 6.2.1
CVE-2026-59836US	critical9.8	0.22% (13th)	—	7.4.6	2026-07-14	2 versions
CVE-2026-39809US	—	0.13% (3rd)	—	7.2.13	2026-04-14	3 versions
CVE-2026-39810US	medium5.5OT elevated	0.10% (1st)	—	7.4.6	2026-04-14	7.4.0 → 7.4.6

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1390Weak Authentication1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.