CVE-2021-36189

4.9 mediumEPSS 0.4%

Medium (4.9) in fortinet forticlient enterprise management server. EPSS 0.4% chance of exploitation in the next 30 days.

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2021-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient_enterprise_management_server

References

https://fortiguard.com/advisory/FG-IR-21-140
https://fortiguard.com/advisory/FG-IR-21-140

Check your stack JSON