GCVE - cpe:2.3:a:fortinet:fortimail:5.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortimail:5.0.2:*:*:*:*:*:*:*

part: a version: 5.0.2 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortimail (`9132bffa-bbc0-5e9e-87cf-98d91d5bddd8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33302`	vulnerable	2026-06-08 06:06:22.273945	Details available MEDIUM (4.5) A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface version 7.2.0 and before 7.1.0 allows an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests. Published: 2025-03-31T14:58:11.960Z Updated: 2025-03-31T15:30:12.990Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-21-023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7732`	vulnerable	2026-06-08 05:10:05.973256	Details available A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests. Published: 2017-10-26T13:00:00.000Z Updated: 2024-10-25T14:11:20.489Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039584 https://fortiguard.com/psirt/FG-IR-17-099 http://www.securityfocus.com/bid/101278	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8617`	vulnerable	2026-06-08 05:06:09.723545	Details available Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol. Published: 2015-03-04T19:00:00.000Z Updated: 2024-08-06T13:26:02.341Z Open on db.gcve.eu Reference links http://www.fortiguard.com/advisory/FG-IR-15-005/ http://seclists.org/fulldisclosure/2015/Mar/5 http://www.securitytracker.com/id/1031859	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.