CVE-2021-36189: Fortinet FortiClient Enterprise Management Server

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data

Affected products

• Fortinet FortiClient Enterprise Management Server: from 6.4.0, up to and including 6.4.4; version 6.4.6 only; version 7.0.0 only; version 7.0.1 only

Published 2021-12-09. Last modified 2026-06-17.