CVE-2023-48788

9.8 criticalKEVEPSS 98%

Critical (9.8) in Fortinet FortiClient EMS. In CISA KEV since 2024-03-25, with known ransomware use. EPSS 98% chance of exploitation in the next 30 days.

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 98% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2024-03-25, due 2024-04-15, known ransomware use
CWE: CWE-89
Published: 2024-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient_enterprise_management_server

References

https://fortiguard.com/psirt/FG-IR-24-007
https://fortiguard.com/psirt/FG-IR-24-007
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788

Check your stack JSON