CVE-2023-48788

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-03-12

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected Platforms (CPE)

📦

Fortinet

Forticlient Enterprise Management Server

>= 7.0.1 and < 7.0.11>= 7.2.0 and < 7.2.3

References & Advisories

🔗 https://fortiguard.com/psirt/FG-IR-24-007

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788

Vulnerability Description

Affected Platforms (CPE)

Forticlient Enterprise Management Server

References & Advisories

相關漏洞威脅