CVE-2023-48786

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-06-10

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests.

Affected Platforms (CPE)

📦

Fortinet

Forticlientems

>= 6.4.0 and <= 6.4.9>= 7.0.0 and <= 7.0.13>= 7.2.0 and < 7.2.7>= 7.4.0 and < 7.4.3

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-23-342

Related Vulnerabilities

CVE-2026-598367.5

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1...

CVE-2026-356169.8

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to ex...

CVE-2024-321194.8

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthentic...

CVE-2025-228595.3

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4....