CVE-2023-48788 CRITICAL

CVE-2023-48788

Vendor Fortinet

Product FortiClientEMS

Weakness CWE-89 · SQLi

KEV Status Known Exploited

Ransomware Used in campaigns

Published March 12, 2024

Last update October 21, 2025

View on NVD All CVEs

CVSS base score

9.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

What the vulnerability does

01Description

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

CISA mandated remediation

02CISA Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Key dates

03Disclosure timeline

March 12, 2024 CVE published

October 21, 2025 Record updated

External resources

04References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-48788 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html CISA KEV Reference https://www.fortiguard.com/psirt/FG-IR-24-007 CISA KEV Reference https://nvd.nist.gov/vuln/detail/CVE-2023-48788

Related vulnerabilities

Identifiers

CVE CVE-2023-48788

CWE CWE-89

CVSS 9.3 / CRITICAL

Affected versions

Vendor Fortinet

Product FortiClientEMS

Affected ≥ 7.2.0 and ≤ 7.2.2

Vendor Fortinet

Product FortiClientEMS

Affected ≥ 7.0.1 and ≤ 7.0.10

CVE-2023-48788

01Description

02CISA Required Action

03Disclosure timeline

04References

05Related CVE