Skip to content
fr Sign in
6.3 Medium

CVE-2025-53681 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…

Description

An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated privileged attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.

Affected products and versions

Product Affected versions Fixed in
FortiMail 7.6 7.6.0 → 7.6.3 No fix stated
FortiMail 7.4 7.4.0 → 7.4.5 No fix stated
FortiMail 7.2 7.2.0 → 7.2.8 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiMail

The 24 CVEs of FortiMail →
CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]… 7.7 High CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability 9.8 Critical CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Low CVE-2025-54972 An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,… 3.9 Low
Track this CVE