Fortinet FortiMail 4.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:*
part: a version: 4.1.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortimail (9132bffa-bbc0-5e9e-87cf-98d91d5bddd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-26122 |
vulnerable | 2026-06-08 05:41:50.594068 |
Details available
MEDIUM (4.7)
An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:53:22.490Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7732 |
vulnerable | 2026-06-08 05:10:05.969176 |
Details available
A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.
Published: 2017-10-26T13:00:00.000Z
Updated: 2024-10-25T14:11:20.489Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.