CVE-2023-48788 Fortinet FortiClient EMS
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiClient EMS SQL Injection Vulnerability
- Added
- 2024-03-25
- Federal patch deadline
- 2024-04-15
- Ransomware use
- known