| CVE-2025-57739 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
|
7.7
Élevée
|
13 oct. 2026 |
| CVE-2026-104286 |
Exploitée
Fortinet FortiMail Path Traversal Vulnerability
|
9.8
Critique
|
1 oct. 2026 |
| CVE-2025-53681 |
An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…
|
6.3
Moyenne
|
12 mai 2026 |
| CVE-2025-55717 |
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
|
3.8
Faible
|
10 mars 2026 |
| CVE-2025-54972 |
An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,…
|
3.9
Faible
|
18 nov. 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Moyenne
|
14 oct. 2025 |
| CVE-2024-40588 |
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
|
4.2
Moyenne
|
12 août 2025 |
| CVE-2025-32756 |
Exploitée
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
|
9.6
Critique
|
13 mai 2025 |
| CVE-2023-33302 |
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and…
|
4.5
Moyenne
|
31 mars 2025 |
| CVE-2021-26091 |
A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity…
|
6.9
Moyenne
|
24 mars 2025 |
| CVE-2023-47539 |
An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and…
|
9.0
Critique
|
18 mars 2025 |
| CVE-2024-46663 |
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3…
|
6.5
Moyenne
|
11 mars 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Moyenne
|
22 janv. 2025 |
| CVE-2024-56497 |
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail…
|
6.5
Moyenne
|
14 janv. 2025 |
| CVE-2022-27488 |
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0…
|
7.5
Élevée
|
13 déc. 2023 |
| CVE-2023-36633 |
An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5…
|
5.3
Moyenne
|
14 nov. 2023 |
| CVE-2023-45582 |
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version…
|
5.3
Moyenne
|
14 nov. 2023 |
| CVE-2023-36637 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through…
|
3.4
Faible
|
10 oct. 2023 |
| CVE-2023-36556 |
An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0…
|
8.6
Élevée
|
10 oct. 2023 |
| CVE-2022-29056 |
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0,…
|
3.5
Faible
|
9 mars 2023 |
| CVE-2021-36193 |
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
|
6.3
Moyenne
|
2 févr. 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Moyenne
|
8 déc. 2021 |
| CVE-2020-9294 |
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0…
|
Non notée
|
27 avr. 2020 |
| CVE-2017-3125 |
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute…
|
Non notée
|
12 avr. 2017 |