| Package | Affected versions | Patched versions |
|---|---|---|
| forticlient enterprise management server | ≥ 7.0.0, < 7.0.13≥ 7.2.0, < 7.2.5 | 7.0.137.2.5 |
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free