{"cvss":9.3,"datePublished":"2024-03-25","dateUpdated":"2024-03-25","description":"Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.","dueDate":"2024-04-15","id":"CVE-2023-48788","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.fortiguard.com/psirt/FG-IR-24-007;  https://nvd.nist.gov/vuln/detail/CVE-2023-48788","product":"FortiClient EMS","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Fortinet FortiClient EMS SQL Injection Vulnerability","vendor":"Fortinet"}