GCVE - cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortimail (`9132bffa-bbc0-5e9e-87cf-98d91d5bddd8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7732`	vulnerable	2026-06-08 05:10:05.978716	Details available A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests. Published: 2017-10-26T13:00:00.000Z Updated: 2024-10-25T14:11:20.489Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039584 https://fortiguard.com/psirt/FG-IR-17-099 http://www.securityfocus.com/bid/101278	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3125`	vulnerable	2026-06-08 05:09:26.483189	Details available An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker. Published: 2017-04-12T15:00:00.000Z Updated: 2024-10-25T14:35:22.847Z Open on db.gcve.eu Reference links http://fortiguard.com/psirt/FG-IR-17-011 http://www.securityfocus.com/bid/97474	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3293`	vulnerable	2026-06-08 05:06:37.920355	Details available FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command. Published: 2015-04-14T18:00:00.000Z Updated: 2024-08-06T05:39:32.085Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032185 http://www.fortiguard.com/advisory/FG-IR-15-009/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8617`	vulnerable	2026-06-08 05:06:09.729074	Details available Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol. Published: 2015-03-04T19:00:00.000Z Updated: 2024-08-06T13:26:02.341Z Open on db.gcve.eu Reference links http://www.fortiguard.com/advisory/FG-IR-15-005/ http://seclists.org/fulldisclosure/2015/Mar/5 http://www.securitytracker.com/id/1031859	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.