[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2lXWJZB4nzes-JIgWpJbYoyB94GJ3y0JdkXn_xg_6oc":3,"g5a-family:fortinet\u002Ffortimail":489,"g5a-ex:fortinet\u002Ffortimail@*":490},{"success":4,"data":5},true,{"product":6,"versions":270,"topVulnerabilitiesByEpss":396,"kevVulnerabilities":458,"seoMetadata":468,"meta":487},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":269},"fortinet","fortimail",125,38,1,"2025-10-14",[14,18,20,23,25,27,29,31,34,36,38,40,42,44,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"3.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"4.0",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"4.1.0",2,{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},"4.2.0",{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.0",{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},"4.3.8",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"4.3.9",{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},"5.0",3,{"version":35,"cve_count":22,"kev_count":16,"has_kev":17},"5.0.1",{"version":37,"cve_count":22,"kev_count":16,"has_kev":17},"5.0.10",{"version":39,"cve_count":22,"kev_count":16,"has_kev":17},"5.0.2",{"version":41,"cve_count":33,"kev_count":16,"has_kev":17},"5.0.3",{"version":43,"cve_count":33,"kev_count":16,"has_kev":17},"5.0.4",{"version":45,"cve_count":46,"kev_count":16,"has_kev":17},"5.0.5",4,{"version":48,"cve_count":46,"kev_count":16,"has_kev":17},"5.0.6",{"version":50,"cve_count":46,"kev_count":16,"has_kev":17},"5.0.7",{"version":52,"cve_count":22,"kev_count":16,"has_kev":17},"5.0.8",{"version":54,"cve_count":22,"kev_count":16,"has_kev":17},"5.0.9",{"version":56,"cve_count":46,"kev_count":16,"has_kev":17},"5.1",{"version":58,"cve_count":22,"kev_count":16,"has_kev":17},"5.1.1",{"version":60,"cve_count":33,"kev_count":16,"has_kev":17},"5.1.2",{"version":62,"cve_count":33,"kev_count":16,"has_kev":17},"5.1.3",{"version":64,"cve_count":22,"kev_count":16,"has_kev":17},"5.1.4",{"version":66,"cve_count":11,"kev_count":16,"has_kev":17},"5.1.5",{"version":68,"cve_count":11,"kev_count":16,"has_kev":17},"5.1.6",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.7",{"version":72,"cve_count":46,"kev_count":16,"has_kev":17},"5.2",{"version":74,"cve_count":46,"kev_count":16,"has_kev":17},"5.2.1",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"5.2.10",{"version":78,"cve_count":46,"kev_count":16,"has_kev":17},"5.2.2",{"version":80,"cve_count":33,"kev_count":16,"has_kev":17},"5.2.3",{"version":82,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.4",{"version":84,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.5",{"version":86,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.6",{"version":88,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.7",{"version":90,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.8",{"version":92,"cve_count":22,"kev_count":16,"has_kev":17},"5.2.9",{"version":94,"cve_count":22,"kev_count":16,"has_kev":17},"5.3",{"version":96,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.1",{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.10",{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.11",{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.12",{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.13",{"version":106,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.2",{"version":108,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.3",{"version":110,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.4",{"version":112,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.5",{"version":114,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.6",{"version":116,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.7",{"version":118,"cve_count":22,"kev_count":16,"has_kev":17},"5.3.8",{"version":120,"cve_count":11,"kev_count":16,"has_kev":17},"5.3.9",{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.0",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.1",{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.10",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.11",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.12",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.2",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.3",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.4",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.5",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.6",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.7",{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.8",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"5.4.9",{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},"5.6.1",{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},"5.6.2",{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},"5.6.3",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.0",{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.1",{"version":158,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.10",{"version":160,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.11",{"version":162,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.12",{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.2",{"version":166,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.3",{"version":168,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.4",{"version":170,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.5",{"version":172,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.6",{"version":174,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.7",{"version":176,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.8",{"version":178,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.9",{"version":180,"cve_count":33,"kev_count":16,"has_kev":17},"6.2.0",{"version":182,"cve_count":11,"kev_count":16,"has_kev":17},"6.2.1",{"version":184,"cve_count":11,"kev_count":16,"has_kev":17},"6.2.2",{"version":186,"cve_count":11,"kev_count":16,"has_kev":17},"6.2.3",{"version":188,"cve_count":11,"kev_count":16,"has_kev":17},"6.2.4",{"version":190,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.5",{"version":192,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.6",{"version":194,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.7",{"version":196,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.8",{"version":198,"cve_count":16,"kev_count":16,"has_kev":17},"6.2.9",{"version":200,"cve_count":22,"kev_count":16,"has_kev":17},"6.4.0",{"version":202,"cve_count":11,"kev_count":16,"has_kev":17},"6.4.1",{"version":204,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.2",{"version":206,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.3",{"version":208,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.4",{"version":210,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.5",{"version":212,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.6",{"version":214,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.7",{"version":216,"cve_count":16,"kev_count":16,"has_kev":17},"6.4.8",{"version":218,"cve_count":33,"kev_count":16,"has_kev":17},"7.0.0",{"version":220,"cve_count":11,"kev_count":16,"has_kev":17},"7.0.1",{"version":222,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.2",{"version":224,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.3",{"version":226,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.4",{"version":228,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.5",{"version":230,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.6",{"version":232,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.7",{"version":234,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.8",{"version":236,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.9",{"version":238,"cve_count":33,"kev_count":16,"has_kev":17},"7.2.0",{"version":240,"cve_count":22,"kev_count":16,"has_kev":17},"7.2.1",{"version":242,"cve_count":22,"kev_count":16,"has_kev":17},"7.2.2",{"version":244,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.3",{"version":246,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.4",{"version":248,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.5",{"version":250,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.6",{"version":252,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.7",{"version":254,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.8",{"version":256,"cve_count":11,"kev_count":16,"has_kev":17},"7.4.0",{"version":258,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.1",{"version":260,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.2",{"version":262,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.3",{"version":264,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.5",{"version":266,"cve_count":16,"kev_count":16,"has_kev":17},"7.4.6",{"version":268,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.3","Fortimail by Fortinet is a technology product with 125 tracked versions and 38 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":11,"kev_count":16,"has_kev":17},{"version":26,"cve_count":11,"kev_count":16,"has_kev":17},{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},{"version":35,"cve_count":22,"kev_count":16,"has_kev":17},{"version":37,"cve_count":22,"kev_count":16,"has_kev":17},{"version":39,"cve_count":22,"kev_count":16,"has_kev":17},{"version":41,"cve_count":33,"kev_count":16,"has_kev":17},{"version":43,"cve_count":33,"kev_count":16,"has_kev":17},{"version":45,"cve_count":46,"kev_count":16,"has_kev":17},{"version":48,"cve_count":46,"kev_count":16,"has_kev":17},{"version":50,"cve_count":46,"kev_count":16,"has_kev":17},{"version":52,"cve_count":22,"kev_count":16,"has_kev":17},{"version":54,"cve_count":22,"kev_count":16,"has_kev":17},{"version":56,"cve_count":46,"kev_count":16,"has_kev":17},{"version":58,"cve_count":22,"kev_count":16,"has_kev":17},{"version":60,"cve_count":33,"kev_count":16,"has_kev":17},{"version":62,"cve_count":33,"kev_count":16,"has_kev":17},{"version":64,"cve_count":22,"kev_count":16,"has_kev":17},{"version":66,"cve_count":11,"kev_count":16,"has_kev":17},{"version":68,"cve_count":11,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":46,"kev_count":16,"has_kev":17},{"version":74,"cve_count":46,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},{"version":78,"cve_count":46,"kev_count":16,"has_kev":17},{"version":80,"cve_count":33,"kev_count":16,"has_kev":17},{"version":82,"cve_count":22,"kev_count":16,"has_kev":17},{"version":84,"cve_count":22,"kev_count":16,"has_kev":17},{"version":86,"cve_count":22,"kev_count":16,"has_kev":17},{"version":88,"cve_count":22,"kev_count":16,"has_kev":17},{"version":90,"cve_count":22,"kev_count":16,"has_kev":17},{"version":92,"cve_count":22,"kev_count":16,"has_kev":17},{"version":94,"cve_count":22,"kev_count":16,"has_kev":17},{"version":96,"cve_count":22,"kev_count":16,"has_kev":17},{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},{"version":106,"cve_count":22,"kev_count":16,"has_kev":17},{"version":108,"cve_count":22,"kev_count":16,"has_kev":17},{"version":110,"cve_count":22,"kev_count":16,"has_kev":17},{"version":112,"cve_count":22,"kev_count":16,"has_kev":17},{"version":114,"cve_count":22,"kev_count":16,"has_kev":17},{"version":116,"cve_count":22,"kev_count":16,"has_kev":17},{"version":118,"cve_count":22,"kev_count":16,"has_kev":17},{"version":120,"cve_count":11,"kev_count":16,"has_kev":17},{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},{"version":158,"cve_count":16,"kev_count":16,"has_kev":17},{"version":160,"cve_count":16,"kev_count":16,"has_kev":17},{"version":162,"cve_count":16,"kev_count":16,"has_kev":17},{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},{"version":166,"cve_count":16,"kev_count":16,"has_kev":17},{"version":168,"cve_count":16,"kev_count":16,"has_kev":17},{"version":170,"cve_count":16,"kev_count":16,"has_kev":17},{"version":172,"cve_count":16,"kev_count":16,"has_kev":17},{"version":174,"cve_count":16,"kev_count":16,"has_kev":17},{"version":176,"cve_count":16,"kev_count":16,"has_kev":17},{"version":178,"cve_count":16,"kev_count":16,"has_kev":17},{"version":180,"cve_count":33,"kev_count":16,"has_kev":17},{"version":182,"cve_count":11,"kev_count":16,"has_kev":17},{"version":184,"cve_count":11,"kev_count":16,"has_kev":17},{"version":186,"cve_count":11,"kev_count":16,"has_kev":17},{"version":188,"cve_count":11,"kev_count":16,"has_kev":17},{"version":190,"cve_count":16,"kev_count":16,"has_kev":17},{"version":192,"cve_count":16,"kev_count":16,"has_kev":17},{"version":194,"cve_count":16,"kev_count":16,"has_kev":17},{"version":196,"cve_count":16,"kev_count":16,"has_kev":17},{"version":198,"cve_count":16,"kev_count":16,"has_kev":17},{"version":200,"cve_count":22,"kev_count":16,"has_kev":17},{"version":202,"cve_count":11,"kev_count":16,"has_kev":17},{"version":204,"cve_count":16,"kev_count":16,"has_kev":17},{"version":206,"cve_count":16,"kev_count":16,"has_kev":17},{"version":208,"cve_count":16,"kev_count":16,"has_kev":17},{"version":210,"cve_count":16,"kev_count":16,"has_kev":17},{"version":212,"cve_count":16,"kev_count":16,"has_kev":17},{"version":214,"cve_count":16,"kev_count":16,"has_kev":17},{"version":216,"cve_count":16,"kev_count":16,"has_kev":17},{"version":218,"cve_count":33,"kev_count":16,"has_kev":17},{"version":220,"cve_count":11,"kev_count":16,"has_kev":17},{"version":222,"cve_count":16,"kev_count":16,"has_kev":17},{"version":224,"cve_count":16,"kev_count":16,"has_kev":17},{"version":226,"cve_count":16,"kev_count":16,"has_kev":17},{"version":228,"cve_count":16,"kev_count":16,"has_kev":17},{"version":230,"cve_count":16,"kev_count":16,"has_kev":17},{"version":232,"cve_count":16,"kev_count":16,"has_kev":17},{"version":234,"cve_count":16,"kev_count":16,"has_kev":17},{"version":236,"cve_count":16,"kev_count":16,"has_kev":17},{"version":238,"cve_count":33,"kev_count":16,"has_kev":17},{"version":240,"cve_count":22,"kev_count":16,"has_kev":17},{"version":242,"cve_count":22,"kev_count":16,"has_kev":17},{"version":244,"cve_count":16,"kev_count":16,"has_kev":17},{"version":246,"cve_count":16,"kev_count":16,"has_kev":17},{"version":248,"cve_count":16,"kev_count":16,"has_kev":17},{"version":250,"cve_count":16,"kev_count":16,"has_kev":17},{"version":252,"cve_count":16,"kev_count":16,"has_kev":17},{"version":254,"cve_count":16,"kev_count":16,"has_kev":17},{"version":256,"cve_count":11,"kev_count":16,"has_kev":17},{"version":258,"cve_count":16,"kev_count":16,"has_kev":17},{"version":260,"cve_count":16,"kev_count":16,"has_kev":17},{"version":262,"cve_count":16,"kev_count":16,"has_kev":17},{"version":264,"cve_count":16,"kev_count":16,"has_kev":17},{"version":266,"cve_count":16,"kev_count":16,"has_kev":17},{"version":268,"cve_count":16,"kev_count":16,"has_kev":17},[397,405,410,417,424,429,435,441,446,451],{"cveId":398,"description":399,"publishedDate":400,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":17,"epssScore":404},"CVE-2020-9294","An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.","2020-04-27",9.8,"v3.1","Critical",0.77778,{"cveId":406,"description":407,"publishedDate":408,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":4,"epssScore":409},"CVE-2025-32756","A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7.2.0 through 7.2.4, 7.0.0 through 7.0.6, FortiCamera versions 2.1.0 through 2.1.3, 2.0 all versions, 1.1 all versions, allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.","2025-05-13",0.30703,{"cveId":411,"description":412,"publishedDate":413,"cvssScore":414,"cvssVersion":402,"severity":415,"isKev":17,"epssScore":416},"CVE-2021-43062","A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service.","2022-02-02",6.1,"Medium",0.12936,{"cveId":418,"description":419,"publishedDate":420,"cvssScore":421,"cvssVersion":422,"severity":415,"isKev":17,"epssScore":423},"CVE-2013-1471","Multiple cross-site scripting (XSS) vulnerabilities in admin\u002FFEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black\u002FWhite List in the AntiSpam section.","2013-02-04",4.3,"v2",0.02437,{"cveId":425,"description":426,"publishedDate":427,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":4,"epssScore":428},"CVE-2026-104286","An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.","2026-10-01",0.02201,{"cveId":430,"description":431,"publishedDate":432,"cvssScore":414,"cvssVersion":433,"severity":415,"isKev":17,"epssScore":434},"CVE-2017-7732","A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.","2017-10-26","v3.0",0.02092,{"cveId":436,"description":437,"publishedDate":438,"cvssScore":439,"cvssVersion":402,"severity":415,"isKev":17,"epssScore":440},"CVE-2022-29056","A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.","2023-03-09",5.3,0.01808,{"cveId":442,"description":443,"publishedDate":444,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":17,"epssScore":445},"CVE-2021-36166","An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties.","2022-03-01",0.01472,{"cveId":447,"description":448,"publishedDate":449,"cvssScore":401,"cvssVersion":402,"severity":403,"isKev":17,"epssScore":450},"CVE-2021-24007","Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.","2021-07-09",0.0143,{"cveId":452,"description":453,"publishedDate":454,"cvssScore":455,"cvssVersion":402,"severity":456,"isKev":17,"epssScore":457},"CVE-2021-26090","A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.","2021-07-12",7.5,"High",0.01328,[459,463],{"cveId":425,"description":426,"publishedDate":427,"cvssScore":401,"severity":403,"isKev":4,"epssScore":428,"cisaVulnName":460,"cisaDateAdded":427,"cisaShortDescription":461,"cisaRequiredAction":462},"Fortinet FortiMail Path Traversal Vulnerability","Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":406,"description":407,"publishedDate":408,"cvssScore":401,"severity":403,"isKev":4,"epssScore":409,"cisaVulnName":464,"cisaDateAdded":465,"cisaShortDescription":466,"cisaRequiredAction":467},"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","2025-05-14","Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":469,"metaDescription":470,"keywords":471,"structuredData":472},"Fortimail by Fortinet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fortimail by Fortinet covering 125 versions with 38 tracked vulnerabilities including 2 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortimail vulnerabilities, Fortimail security, Fortimail CVE, Fortinet Fortimail, Fortimail threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fortimail KEV, Fortimail exploited vulnerabilities",{"@context":473,"@type":474,"name":475,"description":470,"url":476,"manufacturer":477,"applicationCategory":481,"softwareVersion":482,"mainEntity":483},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortimail","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortimail",{"@type":478,"name":479,"url":480},"Organization","Fortinet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffortinet","Security Software","125 versions tracked",{"@type":484,"name":485,"description":486,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fortimail Security Vulnerabilities","Security vulnerabilities affecting Fortimail by Fortinet",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":488,"apiVersion":15},"2026-10-18T22:11:35.821Z",[],{"rows":491,"total":22,"capped":17,"failed":16},[492,499],{"cveId":425,"name":460,"severity":403,"cvss":401,"added":427,"epss":428,"published":493,"ranges":494,"checked":4,"hits":498,"covers":17},"2026-10-01T20:17:24.01",[495,496,497],"7.2.0 to 7.4.8","7.6.0 to 7.6.6","8.0.0 to 8.0.1",[],{"cveId":406,"name":464,"severity":403,"cvss":401,"added":465,"epss":409,"published":500,"ranges":501,"checked":4,"hits":506,"covers":17},"2025-05-13T15:15:57.113",[502,503,504,505],"7.0.0 to before 7.0.9","7.2.0 to before 7.2.8","7.4.0 to before 7.4.5","7.6.0 to before 7.6.3",[]]