9.0
Critical
CVE-2023-47539 An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and…
Description
An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiMail | 7.4.0 | No fix stated |
Other CVEs of FortiMail
The 24 CVEs of FortiMail →
CVE-2025-57739
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
7.7
High
CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
9.8
Critical
CVE-2025-53681
An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…
6.3
Medium
CVE-2025-55717
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
3.8
Low