agentprime: fortinet-fortimailEvery new CVE for fortinet-fortimail.https://agentprime.io/CVE-2025-57739: SQL injection in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2025-57739/https://agentprime.io/advisories/CVE-2025-57739/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:37:11 GMTCVECVE-2026-104286: Path traversal in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2026-104286/https://agentprime.io/advisories/CVE-2026-104286/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 1 Oct 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:17:38 GMTCVEcriticalKEVCVE-2025-53681: SQL injection in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2025-53681/https://agentprime.io/advisories/CVE-2025-53681/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 16:54:11 GMTCVECVE-2025-55717: Cleartext storage of sensitive information in Fortinet FortiVoice and othershttps://agentprime.io/advisories/CVE-2025-55717/https://agentprime.io/advisories/CVE-2025-55717/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 16:44:08 GMTCVECVE-2025-54972: CRLF injection in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2025-54972/https://agentprime.io/advisories/CVE-2025-54972/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 17:01:15 GMTCVECVE-2024-47569: Information disclosure in Fortinet FortiManager and othershttps://agentprime.io/advisories/CVE-2024-47569/https://agentprime.io/advisories/CVE-2024-47569/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 15:23:03 GMTCVECVE-2024-40588: Path traversal in Fortinet FortiCamera and othershttps://agentprime.io/advisories/CVE-2024-40588/https://agentprime.io/advisories/CVE-2024-40588/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 18:59:11 GMTCVECVE-2025-32756: Stack-based buffer overflow in Fortinet FortiNDR and othershttps://agentprime.io/advisories/CVE-2025-32756/https://agentprime.io/advisories/CVE-2025-32756/CVSS 9.6 (Critical). Critical: In CISA’s KEV catalogue since 14 May 2025: it is known to be exploited. CVSS score 9.6: 9.0 or more. CVSS score 9.6 (7.0 or more) and EPSS 0.31 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 14:46:44 GMTCVEcriticalKEVCVE-2023-33302: Buffer overflow in Fortinet FortiNDR and othershttps://agentprime.io/advisories/CVE-2023-33302/https://agentprime.io/advisories/CVE-2023-33302/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 14:58:11 GMTCVECVE-2021-26091: Weak random number generator in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2021-26091/https://agentprime.io/advisories/CVE-2021-26091/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Mar 2025 15:37:58 GMTCVECVE-2023-47539: Improper access control in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2023-47539/https://agentprime.io/advisories/CVE-2023-47539/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Mar 2025 13:56:56 GMTCVEcriticalCVE-2024-46663: Stack-based buffer overflow in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2024-46663/https://agentprime.io/advisories/CVE-2024-46663/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Mar 2025 14:54:31 GMTCVECVE-2022-23439: A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…https://agentprime.io/advisories/CVE-2022-23439/https://agentprime.io/advisories/CVE-2022-23439/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jan 2025 09:10:28 GMTCVECVE-2024-56497: OS command injection in Fortinet FortiMail and othershttps://agentprime.io/advisories/CVE-2024-56497/https://agentprime.io/advisories/CVE-2024-56497/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 14:09:27 GMTCVECVE-2022-27488: Cross-site request forgery in Fortinet FortiVoice and othershttps://agentprime.io/advisories/CVE-2022-27488/https://agentprime.io/advisories/CVE-2022-27488/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:39:42 GMTCVECVE-2023-36633: Improper authorization in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2023-36633/https://agentprime.io/advisories/CVE-2023-36633/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:07:46 GMTCVECVE-2023-45582: Unlimited authentication attempts in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2023-45582/https://agentprime.io/advisories/CVE-2023-45582/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:05:34 GMTCVECVE-2023-36637: Cross-site scripting in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2023-36637/https://agentprime.io/advisories/CVE-2023-36637/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Oct 2023 16:50:16 GMTCVECVE-2023-36556: Incorrect authorization in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2023-36556/https://agentprime.io/advisories/CVE-2023-36556/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Oct 2023 16:49:50 GMTCVECVE-2022-29056: Unlimited authentication attempts in Fortinet FortiMailhttps://agentprime.io/advisories/CVE-2022-29056/https://agentprime.io/advisories/CVE-2022-29056/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Mar 2023 14:54:52 GMTCVECVE-2022-39945: An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an authenticated admin user assigned to a sp…https://agentprime.io/advisories/CVE-2022-39945/https://agentprime.io/advisories/CVE-2022-39945/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Nov 2022 00:00:00 GMTCVECVE-2022-26114: An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting…https://agentprime.io/advisories/CVE-2022-26114/https://agentprime.io/advisories/CVE-2022-26114/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Sep 2022 15:15:12 GMTCVECVE-2021-32586: An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpret…https://agentprime.io/advisories/CVE-2021-32586/https://agentprime.io/advisories/CVE-2021-32586/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Mar 2022 18:20:10 GMTCVECVE-2021-36166: An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of ce…https://agentprime.io/advisories/CVE-2021-36166/https://agentprime.io/advisories/CVE-2021-36166/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Mar 2022 18:10:10 GMTCVEcriticalCVE-2021-36193: Stack-based buffer overflow in Fortinet FortiFone and othershttps://agentprime.io/advisories/CVE-2021-36193/https://agentprime.io/advisories/CVE-2021-36193/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Feb 2022 11:19:47 GMTCVECVE-2021-43062: Fortinet FortiMail: A improper neutralization of input during web page generation ('cross-site scripting') in…https://agentprime.io/advisories/CVE-2021-43062/https://agentprime.io/advisories/CVE-2021-43062/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Feb 2022 11:08:07 GMTCVECVE-2020-15933: Fortinet FortiMail: A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail…https://agentprime.io/advisories/CVE-2020-15933/https://agentprime.io/advisories/CVE-2020-15933/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jan 2022 11:29:04 GMTCVECVE-2021-42757: Buffer overflow in Fortinet FortiOS and othershttps://agentprime.io/advisories/CVE-2021-42757/https://agentprime.io/advisories/CVE-2021-42757/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Dec 2021 11:01:11 GMTCVECVE-2021-26095: The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the session cookie, may al…https://agentprime.io/advisories/CVE-2021-26095/https://agentprime.io/advisories/CVE-2021-26095/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jul 2021 10:48:06 GMTCVECVE-2021-24013: Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.https://agentprime.io/advisories/CVE-2021-24013/https://agentprime.io/advisories/CVE-2021-24013/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jul 2021 13:30:55 GMTCVECVE-2021-24015: An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorize…https://agentprime.io/advisories/CVE-2021-24015/https://agentprime.io/advisories/CVE-2021-24015/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jul 2021 13:25:53 GMTCVECVE-2021-26090: A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust…https://agentprime.io/advisories/CVE-2021-26090/https://agentprime.io/advisories/CVE-2021-26090/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jul 2021 12:53:27 GMTCVECVE-2021-26099: Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confident…https://agentprime.io/advisories/CVE-2021-26099/https://agentprime.io/advisories/CVE-2021-26099/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jul 2021 09:56:37 GMTCVECVE-2021-24007: Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via spec…https://agentprime.io/advisories/CVE-2021-24007/https://agentprime.io/advisories/CVE-2021-24007/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jul 2021 18:37:57 GMTCVEcriticalCVE-2021-22129: Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to tri…https://agentprime.io/advisories/CVE-2021-22129/https://agentprime.io/advisories/CVE-2021-22129/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jul 2021 18:26:30 GMTCVECVE-2021-26100: A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such…https://agentprime.io/advisories/CVE-2021-26100/https://agentprime.io/advisories/CVE-2021-26100/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jul 2021 18:23:01 GMTCVECVE-2021-24020: A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed U…https://agentprime.io/advisories/CVE-2021-24020/https://agentprime.io/advisories/CVE-2021-24020/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jul 2021 18:17:26 GMTCVECVE-2020-9294: Fortinet FortiMail: An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7…https://agentprime.io/advisories/CVE-2020-9294/https://agentprime.io/advisories/CVE-2020-9294/Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Apr 2020 16:20:22 GMTCVECVE-2019-15707: An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authoriz…https://agentprime.io/advisories/CVE-2019-15707/https://agentprime.io/advisories/CVE-2019-15707/Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2020 17:47:00 GMTCVECVE-2019-15712: An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.https://agentprime.io/advisories/CVE-2019-15712/https://agentprime.io/advisories/CVE-2019-15712/Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2020 17:40:40 GMTCVECVE-2017-3125: Fortinet FortiMail: An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0…https://agentprime.io/advisories/CVE-2017-3125/https://agentprime.io/advisories/CVE-2017-3125/Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Apr 2017 15:00:00 GMTCVE