CVE-2013-1471

2022-10-0316:14:48

mitre

www.cve.org

cve-2013-1471

cross-site scripting

fortimail

fortimail identity-based encryption

fortinet

remote attackers

web script injection

html injection

black list

antispam management

user preferences

user name

personal black/white list

antispam

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.