Vulnerabilities > Fortinet > Forticlient > 6.4.5

DATE CVE VULNERABILITY TITLE RISK
2021-12-01 CVE-2021-32592 Uncontrolled Search Path Element vulnerability in Fortinet products
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.
local
low complexity
fortinet CWE-427
7.8
2021-11-02 CVE-2021-42754 Code Injection vulnerability in Fortinet Forticlient
An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.
local
low complexity
fortinet CWE-94
5.0