Fortinet Fortimail (Fortinet) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-11-02. Vendor: Fortinet.
CVEs of Fortinet Fortimail
- CVE-2022-39945 - CVSS 6.5 (medium), 2022-11-02: An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an…
- CVE-2022-26114 - CVSS 6.1 (medium), 2022-09-06: An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated…
- CVE-2021-32586 - CVSS 9.8 (critical), 2022-03-01: An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the…
- CVE-2021-36166 - CVSS 9.8 (critical), 2022-03-01: An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's…
- CVE-2021-43062 - CVSS 6.1 (medium), 2022-02-02: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below,…
- CVE-2020-15933 - CVSS 5.3 (medium), 2022-01-05: A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail…
- CVE-2021-26095 - CVSS 8.8 (high), 2021-07-20: The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption…
- CVE-2021-24015 - CVSS 8.8 (high), 2021-07-12: An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an…
- CVE-2021-24013 - CVSS 8.8 (high), 2021-07-12: Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via…
- CVE-2021-26090 - CVSS 7.5 (high), 2021-07-12: A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an…
- CVE-2021-26099 - CVSS 4.9 (medium), 2021-07-12: Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted…
- CVE-2021-22129 - CVSS 8.8 (high), 2021-07-09: Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated…
- CVE-2021-26100 - CVSS 7.5 (high), 2021-07-09: A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the…
- CVE-2021-24020 - CVSS 9.8 (critical), 2021-07-09: A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an…
- CVE-2021-24007 - CVSS 9.8 (critical), 2021-07-09: Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to…
