https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2023-48788 was assigned before 2024; the KEV listing came in 2024. en Mon, 25 Mar 2024 00:00:00 GMT https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788#2024-03-25-462ee40a Mon, 25 Mar 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788#2024-03-12-1663ff97 Tue, 12 Mar 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-48788">Source</a></p>