CVE-2024-32119

4.8 mediumEPSS 0.3%

Medium (4.8) in fortinet forticlientems. EPSS 0.3% chance of exploitation in the next 30 days.

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-1390
Published: 2025-06-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlientems

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-375

Check your stack JSON