7.7
High
CVE-2021-32586 An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an…
Description
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiMail | Versions not published |
Other CVEs of Fortinet FortiMail
The 15 CVEs of Fortinet FortiMail →
CVE-2022-39945
An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all…
5.4
Medium
CVE-2022-26114
An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before…
5.4
Medium
CVE-2021-36166
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess…
9.8
Critical
CVE-2021-43062
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version…
6.1
Medium