Mar 12, 2024
2 new incidents, 0 with updates.
Started
- ClosedPatched
Fortinet FortiClient EMS SQL Injection
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2023-48788 was assigned before 2024; the KEV listing came in 2024.
Fortinet FortiClient EMSClosed Mar 25, 2024
- ClosedPatched
Microsoft Windows Error Reporting Service Improper Privilege Management
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. Added to the CISA KEV catalog on 2024-06-13. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Jun 13, 2024
