Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiClientEMS Server-Side Request Forgery Vulnerability

Vulnerability

A server-side request forgery vulnerability has been identified in Fortinet FortiClientEMS versions 7.4.0 through 7.4.2 and prior to 7.2.6. This vulnerability may allow an authenticated attacker to send crafted HTTP or HTTPS requests that perform internal requests on behalf of the server.

Impact

Exploitation of this vulnerability could lead to unauthorized internal requests, potentially allowing an authenticated attacker to access or manipulate internal resources or services.

Added: Jun 10, 2025, 6:42 PM
Updated: Jun 10, 2025, 6:42 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
0.6
exploitability
4.9
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.