Fortinet FortiClient SSLVPN Client vulnerabilities

2 CVEs affecting Fortinet FortiClient SSLVPN Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17543, published 2018-04-26.

More from Fortinet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-14184, published 2017-12-15. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334…
• CVE-2017-17543, published 2018-04-26. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN…