---
id: CVE-2023-47534
title: >-
  A improper neutralization of formula elements in a csv file vulnerability in
  Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through
  7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions,
  FortiClien…
summary: >-
  A improper neutralization of formula elements in a csv file vulnerability in
  Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through
  7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions,
  FortiClien…
severity: high
cvss: 8.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:R'
cvssSource: cna
cwe:
  - CWE-1236
vendor: Fortinet
product: FortiClientEMS
affected:
  - FortiClientEMS >= 7.2.0 <= 7.2.2
  - FortiClientEMS >= 7.0.0 <= 7.0.10
  - FortiClientEMS >= 6.4.7 <= 6.4.9
  - FortiClientEMS >= 6.4.0 <= 6.4.4
  - FortiClientEMS >= 6.2.6 <= 6.2.9
  - FortiClientEMS >= 6.2.3 <= 6.2.4
  - FortiClientEMS >= 06.02.00 <= 06.02.02
  - FortiClientEMS 6.0.8
  - FortiClientEMS >= 06.00.00 <= 06.00.06
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-03-21T04:00:36.803943Z'
published: '2024-03-12'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:48:34.711Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-47534'
references:
  - url: 'https://fortiguard.com/psirt/FG-IR-23-390'
    label: 'https://fortiguard.com/psirt/FG-IR-23-390'
tags:
  - cve.org
epss: 0.01051
epssPercentile: 0.63948
ingestedAt: '2026-10-22T22:00:50.275Z'
---

## Overview

A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.

## Affected

- `FortiClientEMS >= 7.2.0 <= 7.2.2`
- `FortiClientEMS >= 7.0.0 <= 7.0.10`
- `FortiClientEMS >= 6.4.7 <= 6.4.9`
- `FortiClientEMS >= 6.4.0 <= 6.4.4`
- `FortiClientEMS >= 6.2.6 <= 6.2.9`
- `FortiClientEMS >= 6.2.3 <= 6.2.4`
- `FortiClientEMS >= 06.02.00 <= 06.02.02`
- `FortiClientEMS 6.0.8`
- `FortiClientEMS >= 06.00.00 <= 06.00.06`

## Remediation

Upgrade to FortiClientEMS version 7.2.3 or above
Upgrade to FortiClientEMS version 7.0.11 or above