Skip to main content

Forticlientems CVE-2024-32119

| EUVDEUVD-2024-29940 MEDIUM
Weak Authentication (CWE-1390)
2025-06-10 psirt@fortinet.com
Authentication Bypass Fortinet Forticlientems
4.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.8 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 19:49 euvd
EUVD-2024-29940
Analysis Generated
Mar 14, 2026 - 19:49 vuln.today
CVE Published
Jun 10, 2025 - 17:19 nvd
MEDIUM 4.8

DescriptionCVE.org

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.

AnalysisAI

A security vulnerability in Fortinet FortiClientEMS (CVSS 4.8). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects Fortinet FortiClientEMS.

RemediationAI

Monitor vendor channels for patch availability.

More in Forticlientems

View all
CVE-2026-35616 CRITICAL POC
9.8 Apr 04

Remote code execution in Fortinet FortiClientEMS versions 7.4.5 through 7.4.6 allows unauthenticated attackers to execut
CVE-2025-59922 HIGH
7.2 Jan 13

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
CVE-2026-59836 CRITICAL
9.8 Jul 14

Improper TLS certificate validation in Fortinet FortiClientEMS (Endpoint Management Server) exposes sensitive informatio
CVE-2019-16149 MEDIUM
5.5 Mar 28

An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attack
CVE-2023-48786 MEDIUM
4.3 Jun 10

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before

CVE-2025-22855 LOW
2.7 Apr 08

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortin
CVE-2025-22859 MEDIUM
5.3 May 13

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 th
CVE-2024-36510 MEDIUM
5.3 Jan 14

An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all version
CVE-2024-36506 LOW
3.7 Jan 14

An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 thr
CVE-2024-23106 HIGH
8.1 Jan 14

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and

Same weakness CWE-1390 – Weak Authentication

View all
CVE-2026-55040 CRITICAL POC
9.1
CVE-2025-40552 CRITICAL POC
9.8
CVE-2025-40554 CRITICAL POC
9.8
CVE-2024-34451 CRITICAL POC
9.1
CVE-2024-36787 HIGH POC
8.8
CVE-2024-0822 HIGH POC
7.5
CVE-2026-73819 CRITICAL
9.3
CVE-2026-68067 CRITICAL
9.3

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2024-32119 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy