← Database

CVE-2025-22859

MEDIUM CVSS: 5.3 Published: 2025-05-13 Modified: 2026-06-17

Description

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upload requests.

Affected Platforms

Fortinet Forticlientems CloudFortinet Forticlientems

Weakness Type

CWE-23

References