Vulnerability Database

296,760

Total vulnerabilities in the database

CVE-2024-23106

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests.

  • Published: Jan 14, 2025
  • Updated: Jul 17, 2025
  • CVE: CVE-2024-23106
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / forticlientems 6.2.0 6.2.9.x
fortinet / forticlientems 6.4.0 6.4.9.x
fortinet / forticlientems 7.2.0 7.2.5
fortinet / forticlientems 7.0.0 7.0.11