CVE-2023-48788

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Fortinet	FortiClientEMS	>= 7.2.0, <= 7.2.2; >= 7.0.1, <= 7.0.10
fortinet	forticlient_enterprise_management_server	>= 7.2.0, <= 7.2.2; >= 7.0.1, <= 7.0.10
fortinet	forticlient_enterprise_management_server	>= 7.2.0, <= 7.2.2; >= 7.0.1, <= 7.0.10

References

https://fortiguard.com/psirt/FG-IR-24-007Vendor Advisory
https://fortiguard.com/psirt/FG-IR-24-007Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788US Government Resource

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
Added to CISA KEV: Mar 25, 2024
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-487896.5A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access co CVE-2023-48794.8Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.CVE-2023-487908.8A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and bef CVE-2023-487918.8An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, CVE-2023-487929.8Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.CVE-2023-487939.8Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.CVE-2023-487955.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas CVE-2023-487967.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information exposed to unauthorize CVE-2023-487999.8TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.CVE-2023-488009.8In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them thr CVE-2023-488019.8In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them thr CVE-2023-488029.8In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str