Filtered by vendor Fortinet Subscriptions
Filtered by product Forticlientems Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-36506 1 Fortinet 2 Forticlientems, Forticlientems Cloud 2025-01-31 3.5 Low
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection.
CVE-2024-36510 1 Fortinet 2 Forticlientems, Fortisoar 2025-01-31 4.9 Medium
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.