Known vulnerabilities in FortiMail 6.4.3 - page 2

Software: FortiMail
Version: 6.4.3
Software CPE: cpe:2.3:a:fortinet:fortinet_fortimail:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting FortiMail version 6.4.3 FortiMail 6.4.3 is affected by 27 vulnerabilities: 6 high, 14 medium, 7 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54787 - Missing Required Cryptographic Step
CVE-2021-24020
CWE-325 High
No
No
6.4.5 13.07.2021 SB2021071352
#VU54784 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-24007
CWE-89 High
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352
#VU54779 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-24015
CWE-78 Low
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352
#VU54776 - Missing release of memory after effective lifetime
CVE-2021-26090
CWE-401 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54775 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-26091
CWE-338 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54772 - Inadequate Encryption Strength
CVE-2021-26095
CWE-326 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-24013
CWE-22 High
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352


Showing elements 21 - 40 out of 27