Known vulnerabilities in FortiMail - page 2

Software: FortiMail
Software CPE: cpe:2.3:a:fortinet:fortinet_fortimail:*:*:*:*:*:*:*:*
Total vulnerabilities: 40
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiMail FortiMail is affected by 40 known vulnerabilities: 1 critical, 8 high, 16 medium, 15 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
- 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60933 - Improper input validation
CVE-2021-32586
CWE-20 Medium
No
No
6.0.12, 6.2.8, 6.4.6, 7.0.1 01.03.2022 SB2022030125
#VU60932 - Improper Authentication
CVE-2021-36166
CWE-287 High
No
No
6.0.12, 6.2.8, 6.4.6 01.03.2022 SB2022030125
#VU60216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43062
CWE-79 Medium
Available
No
6.2.8, 6.4.6, 7.0.2 01.02.2022 SB2022020174
#VU58633 - Missing Required Cryptographic Step
CVE-2021-32591
CWE-325 Medium
No
No
- 07.12.2021 SB2021120720
SB2021120721
#VU54791 - Missing Required Cryptographic Step
CVE-2021-26099
CWE-325 Low
No
No
7.0.0 13.07.2021 SB2021071352
#VU54790 - Missing Required Cryptographic Step
CVE-2021-26100
CWE-325 Medium
No
No
7.0.0 13.07.2021 SB2021071352
#VU54787 - Missing Required Cryptographic Step
CVE-2021-24020
CWE-325 High
No
No
6.4.5 13.07.2021 SB2021071352
#VU54784 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-24007
CWE-89 High
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352
#VU54779 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-24015
CWE-78 Low
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352
#VU54776 - Missing release of memory after effective lifetime
CVE-2021-26090
CWE-401 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54775 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-26091
CWE-338 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54772 - Inadequate Encryption Strength
CVE-2021-26095
CWE-326 Medium
No
No
6.4.5 13.07.2021 SB2021071352
#VU54731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-24013
CWE-22 High
No
No
6.0.11, 6.2.7, 6.4.4 13.07.2021 SB2021071352
#VU54728 - Memory corruption
CVE-2021-22129
CWE-119 High
No
No
6.0.11, 6.2.7, 6.4.5 13.07.2021 SB2021071352
#VU48132 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15933
CWE-200 Low
No
No
6.0.10, 6.2.5, 6.4.2 03.11.2020 SB2020110315
#VU27367 - Weak password recovery mechanism
CVE-2020-9294
CWE-640 High
Available
No
5.4.11, 6.0.8, 6.2.3 27.04.2020 SB2020042719
#VU22613 - Improper Access Control
CVE-2019-15707
CWE-284 Medium
Available
No
6.2.1 08.11.2019 SB2019101810
#VU22612 - Improper Access Control
CVE-2019-15712
CWE-284 Medium
No
No
6.2.1 08.11.2019 SB2019101810
#VU8912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7732
CWE-79 Low
No
No
- 17.10.2017 SB2017101310


Showing elements 21 - 40 out of 40