FF
Product
Fortinet FortiMail
by Fortinet · last CVE Nov 2, 2022
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 6Low 0
Watch

Add Fortinet FortiMail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-26095
8.8
1%
Jul 20
The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the…
Affected: FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6
CVE-2021-24015
8.8
1%
Jul 12
An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to…
Affected: FortiMail before 6.4.4
CVE-2021-22129
8.8
1%
Jul 9
Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular…
Affected: FortiMail before 6.4.5
CVE-2021-26090
7.5
1%
Jul 12
A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote…
Affected: FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6
CVE-2021-26100
7.5
0%
Jul 9
A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to…
Affected: FortiMail before 7.0.0
Showing 5