Fortinet Fortinet FortiMail vulnerabilities

CVEs per yearBy the year they were published

1. 20219
2. 20226

Newest CVEs

• CVE-2022-39945

  An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an…

  Fortinet · Fortinet FortiMail

  Medium5.4
• CVE-2022-26114

  An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated…

  Fortinet · Fortinet FortiMail

  Medium5.4
• CVE-2021-32586

  An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the…

  Fortinet · Fortinet FortiMail

  High7.7
• CVE-2021-36166

  An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication…

  Fortinet · Fortinet FortiMail

  Critical9.8
• CVE-2021-43062

  A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below,…

  Fortinet · Fortinet FortiMail

  Medium6.1
• CVE-2020-15933

  A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail…

  Fortinet · Fortinet FortiMail

  Medium5.3
• CVE-2021-26095

  The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption…

  Fortinet · Fortinet FortiMail

  High7.5
• CVE-2021-24013

  Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via…

  Fortinet · Fortinet FortiMail

  High8.8
• CVE-2021-24015

  An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an…

  Fortinet · Fortinet FortiMail

  High7.2
• CVE-2021-26090

  A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an…

  Fortinet · Fortinet FortiMail

  Medium5.3