Aller au contenu
en Se connecter
6.3 Moyenne

CVE-2025-53681 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…

Description

An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated privileged attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
FortiMail 7.6 7.6.0 → 7.6.3 Pas de correctif indiqué
FortiMail 7.4 7.4.0 → 7.4.5 Pas de correctif indiqué
FortiMail 7.2 7.2.0 → 7.2.8 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FortiMail

Les 24 CVE de FortiMail →
CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]… 7.7 Élevée CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability 9.8 Critique CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Faible CVE-2025-54972 An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,… 3.9 Faible
Suivre cette CVE