4.5
Medium
CVE-2023-33302 A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and…
Description
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface version 7.2.0 and before 7.1.0 allows an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiNDR | 7.2.0 | No fix stated |
| FortiNDR | 7.1.0 | No fix stated |
| FortiNDR 7.0 | 7.0.0 → 7.0.6 | No fix stated |
| FortiNDR 1.5 | 1.5.0 → 1.5.3 | No fix stated |
| FortiNDR | 1.4.0 | No fix stated |
| FortiNDR 1.3 | 1.3.0 → 1.3.1 | No fix stated |
| FortiNDR | 1.2.0 | No fix stated |
| FortiNDR | 1.1.0 | No fix stated |
| FortiMail 6.4 | 6.4.0 → 6.4.4 | No fix stated |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiMail 6.2 | 6.2.0 → 6.2.6 | No fix stated |
| FortiMail 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiMail 5.4 | 5.4.0 → 5.4.12 | No fix stated |
| FortiMail 5.3 | 5.3.0 → 5.3.13 | No fix stated |
| FortiMail 5.2 | 5.2.0 → 5.2.10 | No fix stated |
| FortiMail 5.1 | 5.1.0 → 5.1.7 | No fix stated |
| FortiMail 5.0 | 5.0.0 → 5.0.11 | No fix stated |
Other CVEs of FortiNDR
The 13 CVEs of FortiNDR →
CVE-2026-25088
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
4.9
Medium
CVE-2024-23104
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0…
5.4
Medium
CVE-2024-47569
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
4.2
Medium
CVE-2024-40588
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
4.2
Medium