Skip to contentFortinet Fortimail vulnerabilities
- fortinet fortimailAn improper neutralization of input during web page generation vulnerability [CWE-79] in the...CVE-2022-261145.4 Medium
- fortinet fortiadc, fortimail, fortios +2 more +4 moreA format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0...CVE-2022-222997.8 High
- fortinet fortimailAn improper input validation vulnerability in the web server CGI facilities of FortiMail before 7...CVE-2021-325867.7 High
- fortinet fortimailAn improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to...CVE-2021-361669.8 Critical
- fortinet fortiweb, fortiadc, fortiddos +7 more +9 moreMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2...CVE-2021-361936.3 Medium
- fortinet fortimailA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2021-43062Public exploitEPSS 12.9%6.1 Medium
- fortinet fortimailA exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9...CVE-2020-159335.3 Medium
- fortinet fortiadc, fortimail, fortisandbox +1 more +3 moreA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS...CVE-2021-325915.3 Medium
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortimailThe combination of various cryptographic issues in the session management of FortiMail 6.4.0...CVE-2021-260957.5 High
- fortinet fortimailMultiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a...CVE-2021-240138.8 High
- fortinet fortimailAn improper neutralization of special elements used in an OS Command vulnerability in the...CVE-2021-240157.2 High
- fortinet fortimailA missing release of memory after its effective lifetime vulnerability in the Webmail of...CVE-2021-260905.3 Medium
- fortinet fortimailMissing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0...CVE-2021-260994.4 Medium
- fortinet fortimailMultiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail...CVE-2021-240079.8 Critical
- fortinet fortimailMultiple instances of incorrect calculation of buffer size in the Webmail and Administrative...CVE-2021-221298.8 High
- fortinet fortimailA missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0...CVE-2021-261005.9 Medium
- fortinet fortimailA missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4...CVE-2021-240207.5 High
- fortinet fortimail, fortivoice, fortivoiceenterprise +2 moreAn improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and...CVE-2020-9294EPSS 81.5%9.8 Critical
- fortinet fortimailAn improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10...CVE-2019-15707Public exploit4.9 Medium
- fortinet fortimailAn improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10...CVE-2019-157127.2 High
- fortinet fortimailA reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0...CVE-2017-77326.1 Medium
- fortinet fortimailAn unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow...CVE-2017-31256.1 Medium
- fortinet fortimailFortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag...CVE-2015-32934.0 Medium
- fortinet fortimailCross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the...CVE-2014-86174.3 Medium
- fortinet fortimailMultiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail...CVE-2013-1471Public exploit4.3 Medium