CVE-2021-36189

MEDIUM 4.9CVE-2021-36189 · Published 09/12/2021 · updated 17/06/2026

In short

CVE-2021-36189 is a MEDIUM (CVSS 4.9) vulnerability affecting forticlient enterprise management server (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
forticlient enterprise management server fortinet	`= 6.4.6= 7.0.0= 7.0.1≥ 6.4.0, ≤ 6.4.4`	No fix yet

Description

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

References

fortiguard.com/advisory/FG-IR-21-140 · Patch

More vulnerabilities in forticlient enterprise management server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

forticlient enterprise management server

fortinet

= 6.4.6= 7.0.0= 7.0.1≥ 6.4.0, ≤ 6.4.4

No fix yet

More vulnerabilities in forticlient enterprise management server

See all →