7.7
Élevée
CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]…
Description
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Produits et versions touchés
Autres CVE de FortiMail
Les 24 CVE de FortiMail →
CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
9.8
Critique
CVE-2025-53681
An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89]…
6.3
Moyenne
CVE-2025-55717
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
3.8
Faible
CVE-2025-54972
An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,…
3.9
Faible