CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2025-22859

MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-05-13
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upload requests.

Affected Platforms (CPE)

📦
Fortinet

Forticlientems

>= 7.4.0 and < 7.4.3
📦
Fortinet

Forticlientems Cloud

>= 7.4.0 and < 7.4.3

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-24-552

相關漏洞威脅

CVE-2026-598367.5

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1...

CVE-2026-356169.8

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to ex...

CVE-2024-321194.8

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthentic...

CVE-2023-487864.3

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may ...