Fortinet FortiMail
24 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-57739 | 7.6.0 – 7.6.3 ; 7.4.0 – 7.4.5 ; 7.2.0 – 7.2.8 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet For | HIGH 8.8 | 0.3 % | ||
| CVE-2026-104286 | 8.0.0 ; 7.6.0 – 7.6.5 ; 7.4.0 – 7.4.6 ; … | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, F | CRITICAL 9.8 | 4.6 % | KEV | |
| CVE-2025-53681 | 7.6.0 – 7.6.3 ; 7.4.0 – 7.4.5 ; 7.2.0 – 7.2.8 | An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet Fo | HIGH 7.2 | 0.4 % | ||
| CVE-2025-55717 | 7.6.0 – 7.6.2 ; 7.4.0 – 7.4.4 ; 7.2.0 – 7.2.7 ; … | A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4. | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-54972 | 7.6.0 – 7.6.3 ; 7.4.0 – 7.4.5 ; 7.2.0 – 7.2.9 ; … | An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 thr | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-47569 | | A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, | MEDIUM 4.3 | 0.5 % | ||
| CVE-2024-40588 | 7.6.0 – 7.6.1 ; 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.9 ; … | Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCa | MEDIUM 4.4 | 0.2 % | ||
| CVE-2025-32756 | 7.6.0 – 7.6.2 ; 7.4.0 – 7.4.4 ; 7.2.0 – 7.2.7 ; … | A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all version | CRITICAL 9.8 | 31 % | KEV | |
| CVE-2023-33302 | 6.4.0 – 6.4.4 ; 6.2.0 – 6.2.6 ; 6.0.0 – 6.0.10 ; … | A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version | HIGH 8.8 | 0.4 % | ||
| CVE-2021-26091 | 6.4.0 – 6.4.4 ; 6.2.0 – 6.2.9 ; 6.2.0 – < 6.2.* | A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service | HIGH 7.5 | 0.3 % | ||
| CVE-2023-47539 | 7.4.0 | An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may al | CRITICAL 9.8 | 1.1 % | ||
| CVE-2024-46663 | 7.6.0 – 7.6.1 ; 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.7 ; … | A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged a | MEDIUM 6.7 | 0.2 % | ||
| CVE-2022-23439 | | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte | MEDIUM 6.1 | 0.4 % | ||
| CVE-2024-56497 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.6 ; 6.4.0 – 6.4.7 | An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7 | MEDIUM 6.7 | 0.6 % | ||
| CVE-2022-27488 | 7.0.0 – 7.0.3 ; 6.4.0 – 6.4.6 ; 6.2.0 – 6.2.9 ; … | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 th | HIGH 8.8 | 0.5 % | ||
| CVE-2023-36633 | 7.2.0 – 7.2.2 ; 7.0.0 – 7.0.5 ; 6.4.0 – 6.4.8 ; … | An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-45582 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.6 ; … | An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 | HIGH 7.3 | 0.5 % | ||
| CVE-2023-36637 | 7.2.0 – 7.2.2 ; 7.0.1 – 7.0.5 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7. | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-36556 | 7.2.0 – 7.2.2 ; 7.0.0 – 7.0.5 ; 6.4.0 – 6.4.7 ; … | An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6 | HIGH 8.8 | 1.1 % | ||
| CVE-2022-29056 | 6.4.0 ; 6.2.1 – 6.2.4 ; 6.0.0 – 6.0.9 ; … | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 throu | MEDIUM 5.3 | 1.8 % | ||
| CVE-2021-36193 | 7.0.0 – 7.0.2 ; 6.4.0 – 6.4.6 ; 6.2.0 – 6.2.8 ; … | Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achiev | HIGH 7.2 | 0.8 % | ||
| CVE-2021-42757 | | A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated l | MEDIUM 6.7 | 0.5 % | ||
| CVE-2020-9294 | 5.4.10 ; 6.0.7 ; 6.2.2 and earlier | An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a | CRITICAL 9.8 | 82 % | ||
| CVE-2017-3125 | 5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8 | An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in | MEDIUM 6.1 | 1.1 % |