Description
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | FortiClientEMS | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
Vendor Solution
Upgrade to FortiClientEMS version 7.2.3 or above Upgrade to FortiClientEMS version 7.0.11 or above
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-51645 | A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets. |
References
| Link | Providers |
|---|---|
| https://fortiguard.com/psirt/FG-IR-23-390 |
|
History
Thu, 22 Oct 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:fortinet:forticlient_endpoint_management_server:6.0.8:*:*:*:*:*:*:* | |
| Metrics |
ssvc
|
Thu, 22 Oct 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets. | A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets. |
| First Time appeared |
Fortinet forticlientems
|
|
| CPEs | cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:* |
|
| Vendors & Products |
Fortinet forticlientems
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published:
Updated: 2026-10-22T13:48:34.711Z
Reserved: 2023-11-06T10:35:25.827Z
Link: CVE-2023-47534
Vulnrichment
Updated: 2024-08-02T21:09:37.346Z
NVD
Status : Modified
Published: 2024-03-12T15:15:46.770
Modified: 2026-10-22T14:17:33.987
Link: CVE-2023-47534
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses