CVE-2021-32586
01.03.2022, 19:15
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortimail | 𝑥 ≤ 5.4.12 |
| fortinet | fortimail | 6.0.0 ≤ 𝑥 < 6.0.12 |
| fortinet | fortimail | 6.2.0 ≤ 𝑥 < 6.2.8 |
| fortinet | fortimail | 6.4.0 ≤ 𝑥 < 6.4.6 |
| fortinet | fortimail | 7.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration