Fortinet FortiMail 6.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*
part: a version: 6.4.2 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortimail (9132bffa-bbc0-5e9e-87cf-98d91d5bddd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-56497 |
vulnerable | 2026-06-08 06:54:17.929030 |
Details available
MEDIUM (6.5)
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI.
Published: 2025-01-14T14:09:27.433Z
Updated: 2025-01-14T20:55:21.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46663 |
vulnerable | 2026-06-08 06:48:10.274020 |
Details available
MEDIUM (6.5)
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.
Published: 2025-03-11T14:54:31.928Z
Updated: 2026-02-26T19:09:41.215Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40588 |
vulnerable | 2026-06-08 06:43:52.625007 |
Details available
MEDIUM (4.2)
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6.1, FortiMail 7.4.0 through 7.4.3, FortiMail 7.2 all versions, FortiMail 7.0 all versions, FortiMail 6.4 all versions, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.6, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiRecorder 6.4 all versions, FortiVoice 7.0.0 through 7.0.3, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.
Published: 2025-08-12T18:59:11.807Z
Updated: 2026-01-14T09:17:11.543Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33302 |
vulnerable | 2026-06-08 06:06:22.214085 |
Details available
MEDIUM (4.5)
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface version 7.2.0 and before 7.1.0 allows an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests.
Published: 2025-03-31T14:58:11.960Z
Updated: 2025-03-31T15:30:12.990Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23439 |
vulnerable | 2026-06-08 05:40:57.427426 |
Details available
MEDIUM (4.1)
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
Published: 2025-01-22T09:10:28.669Z
Updated: 2026-01-14T13:06:07.365Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42757 |
vulnerable | 2026-06-08 05:35:22.709472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36193 |
vulnerable | 2026-06-08 05:32:49.957501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26091 |
vulnerable | 2026-06-08 05:30:41.930726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.