CVE-2023-48788

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

98.45% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2024-03-25, used in ransomware campaigns

Nuclei

critical · CWE-89

Published

2024-03-12

Updated

2025-10-21

Proof-of-concept exploits (1)

• horizon3ai/CVE-2023-4878854★ · 2024-03-20

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-48788.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/forticlient_ems_fct…

References

• CVE Record
• NVD entry

Related

• CVE-2023-4878
• CVE-2023-4879
• CVE-2023-48777
• CVE-2023-48795
• CVE-2023-48736
• CVE-2023-48799