IDCVSSSummaryLast (major) updatePublished
CVE-2017-7732 4.3
A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via craft
26-10-2017 - 09:29 26-10-2017 - 09:29
CVE-2017-3125 4.3
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered
18-04-2017 - 16:47 12-04-2017 - 11:59
CVE-2015-3293 4.0
FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command.
02-01-2017 - 22:00 14-04-2015 - 14:59
CVE-2014-8617 4.3
Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web scr
19-11-2015 - 12:43 04-03-2015 - 14:59
CVE-2013-1471 4.3
Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) t
08-02-2013 - 00:00 04-02-2013 - 14:55
Back to Top Mark selected
Back to Top