CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability

CISA KEVExploited: confirmedFortinet

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

Vulnerability details

Affected productsFortiClient EMS
KEV remediation due2024-04-15