Product:
FortiClientEMS
Summary
An SQL Injection vulnerability exists in Fortinet FortiClientEMS versions 7.4.3 through 7.4.4, 7.4.0 through 7.4.1, 7.2.0 through 7.2.10, and all versions of 7.0. This vulnerability allows an authenticated attacker with read-only admin permission to execute unauthorized SQL code or commands through crafted HTTP or HTTPS requests. This can lead to significant security risks including unauthorized data access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2025-59922 |
Exploitation
To exploit this vulnerability, an attacker must have at least read-only admin permissions. They can craft specific HTTP or HTTPS requests that include malicious SQL commands. When these requests are processed by the FortiClientEMS, the SQL commands may be executed, allowing the attacker to manipulate the database or access sensitive information.
Affected Products
- FortiClientEMS 7.4.3 – 7.4.4: Vulnerable to SQL Injection allowing unauthorized command execution.
- FortiClientEMS 7.4.0 – 7.4.1: Affected by the same SQL Injection vulnerability.
- FortiClientEMS 7.2.0 – 7.2.10: Also susceptible to SQL Injection attacks.
- FortiClientEMS 7.0: All versions are vulnerable to this issue.
Mitigation
To mitigate this vulnerability, it is recommended to update FortiClientEMS to the latest version that addresses the SQL Injection issue. Additionally, restricting access permissions and monitoring for unusual activity can help reduce the risk of exploitation.