Medium severity4.3NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026
CVE-2023-48786
CVE-2023-48786
Description
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*range: >=6.4.0,<=6.4.9
- (no CPE)range: 7.4.0 - 7.4.2, before 7.2.6
- (no CPE)range: 7.2.0
Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-23-342nvdVendor Advisory
News mentions
0No linked articles in our index yet.