CVE-2021-44172

5.3 mediumEPSS 0.9%

Medium (5.3) in fortinet forticlient endpoint management server. EPSS 0.9% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2023-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient_endpoint_management_server

References

https://fortiguard.com/psirt/FG-IR-21-244
https://fortiguard.com/psirt/FG-IR-21-244

Check your stack JSON