Fortinet Alerts Users to Critical SQL Injection Vulnerability

Fortinet cautions about a severe vulnerability in its FortiClientEMS software, which enables attackers to execute unauthorized code. Tracked as CVE-2023-48788, score 9.8, it affects FortiClientEMS versions 7.0.1 through 7.0.10 and 7.2.0 through 7.2.2. Fortinet recommends upgrading to versions 7.0.11 or above for 7.x and 7.2.3 or higher. They also addressed two other critical bugs in FortiOS and FortiProxy, which could permit code execution.