| CVE-2022-39945 |
An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all…
|
5.4
Medium
|
Nov 2, 2022 |
| CVE-2022-26114 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before…
|
5.4
Medium
|
Sep 6, 2022 |
| CVE-2021-32586 |
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an…
|
7.7
High
|
Mar 1, 2022 |
| CVE-2021-36166 |
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess…
|
9.8
Critical
|
Mar 1, 2022 |
| CVE-2021-43062 |
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version…
|
6.1
Medium
|
Feb 2, 2022 |
| CVE-2020-15933 |
A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail…
|
5.3
Medium
|
Jan 5, 2022 |
| CVE-2021-26095 |
The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0…
|
7.5
High
|
Jul 20, 2021 |
| CVE-2021-24013 |
Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain…
|
8.8
High
|
Jul 12, 2021 |
| CVE-2021-24015 |
An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of…
|
7.2
High
|
Jul 12, 2021 |
| CVE-2021-26090 |
A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4…
|
5.3
Medium
|
Jul 12, 2021 |
| CVE-2021-26099 |
Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who…
|
4.4
Medium
|
Jul 12, 2021 |
| CVE-2021-24007 |
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow…
|
9.8
Critical
|
Jul 9, 2021 |
| CVE-2021-22129 |
Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail…
|
8.8
High
|
Jul 9, 2021 |
| CVE-2021-26100 |
A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an…
|
5.9
Medium
|
Jul 9, 2021 |
| CVE-2021-24020 |
A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and…
|
7.5
High
|
Jul 9, 2021 |