CVE-2021-32586

EUVD-2021-19426
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
fortinetCNA
7.7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
fortinetfortimail
𝑥
≤ 5.4.12
fortinetfortimail
6.0.0 ≤
𝑥
< 6.0.12
fortinetfortimail
6.2.0 ≤
𝑥
< 6.2.8
fortinetfortimail
6.4.0 ≤
𝑥
< 6.4.6
fortinetfortimail
7.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://fortiguard.com/psirt/FG-IR-21-008
https://fortiguard.com/psirt/FG-IR-21-008