| CVE-2025-57739 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
|
7.7
High
|
Oct 13, 2026 |
| CVE-2026-104286 |
Exploited
Fortinet FortiMail Path Traversal Vulnerability
|
9.8
Critical
|
Oct 1, 2026 |
| CVE-2025-53681 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…
|
6.3
Medium
|
May 12, 2026 |
| CVE-2025-55717 |
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
|
3.8
Low
|
Mar 10, 2026 |
| CVE-2025-54972 |
An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,…
|
3.9
Low
|
Nov 18, 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2024-40588 |
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
|
4.2
Medium
|
Aug 12, 2025 |
| CVE-2025-32756 |
Exploited
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
|
9.6
Critical
|
May 13, 2025 |
| CVE-2023-33302 |
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and…
|
4.5
Medium
|
Mar 31, 2025 |
| CVE-2021-26091 |
A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity…
|
6.9
Medium
|
Mar 24, 2025 |
| CVE-2023-47539 |
An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and…
|
9.0
Critical
|
Mar 18, 2025 |
| CVE-2024-46663 |
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3…
|
6.5
Medium
|
Mar 11, 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Medium
|
Jan 22, 2025 |
| CVE-2024-56497 |
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail…
|
6.5
Medium
|
Jan 14, 2025 |
| CVE-2022-27488 |
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0…
|
7.5
High
|
Dec 13, 2023 |
| CVE-2023-36633 |
An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5…
|
5.3
Medium
|
Nov 14, 2023 |
| CVE-2023-45582 |
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version…
|
5.3
Medium
|
Nov 14, 2023 |
| CVE-2023-36637 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through…
|
3.4
Low
|
Oct 10, 2023 |
| CVE-2023-36556 |
An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0…
|
8.6
High
|
Oct 10, 2023 |
| CVE-2022-29056 |
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0,…
|
3.5
Low
|
Mar 9, 2023 |
| CVE-2021-36193 |
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
|
6.3
Medium
|
Feb 2, 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Medium
|
Dec 8, 2021 |
| CVE-2020-9294 |
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0…
|
Not rated
|
Apr 27, 2020 |
| CVE-2017-3125 |
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute…
|
Not rated
|
Apr 12, 2017 |