Skip to content
Sign in
5.3 Medium

CVE-2023-45582 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version…

Description

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to  perform a brute force attack on the affected endpoints via repeated login attempts.

Affected products and versions

Product Affected versions Fixed in
FortiMail 7.4.0 No fix stated
FortiMail 7.2 7.2.0 → 7.2.4 No fix stated
FortiMail 7.0 7.0.0 → 7.0.6 No fix stated
FortiMail 6.4 6.4.0 → 6.4.8 No fix stated
FortiMail 6.2 6.2.0 → 6.2.9 No fix stated

Other CVEs of FortiMail

The 24 CVEs of FortiMail →
CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]… 7.7 High CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability 9.8 Critical CVE-2025-53681 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]… 6.3 Medium CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Low
Track this CVE