FortiClient for Windows

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVE	Published	Affected versions	Fixed version information	Publisher evidence
CVE-2018-9195	21 Nov 2019	FortiClient for Windows 6.0.6 and below; FortiOS 6.0.7 and below; FortiClient for Mac OS 6.2.1 and below	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2017-17543	26 Apr 2018	5.6.0 and below versions; 4.4.2335 and below versions	No fixed version is explicitly recorded in the structured CVE data.	Use CVE record
CVE-2017-14184	15 Dec 2017	5.6.0 and below; 4.4.2334 and below	CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly. FortiClient for Windows: Upgrade to 5.6.1 FortiClient for Mac OSX: Upgrade to 5.6.1 FortiClient SSLVPN Client for Linux: Upgrade to 4.4.2335 released together with FortiOS 5.4.7 References: https://fortiguard.com/psirt/FG-IR-17-214 http://seclists.org/fulldisclosure/2017/Dec/43 https://www.sec-consult.com/en/blog/advisories/vpn-credentials-disclosure-in-fortinet-forticlient/index.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-14184	Update reference ↗

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.