482 matches found
CVE-2017-7732
A reflected Cross-Site Scripting XSS vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests...
CVE-2017-7732
A reflected Cross-Site Scripting XSS vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests...
Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2017-32260)
FortiMail devices are communication security platforms. Multiple cross-site scripting vulnerabilities exist in the implementation of Fortinet FortiMail versions = 5.1, 5.2.0-5.2.9, 5.3.0-5.3.9, which can be exploited by an attacker to execute arbitrary script code in the context of an affected us...
FortiMail reflected XSS vulnerability under customized webmail login page
There exists a reflected cross-site scripting XSS vulnerability on FortiMail customized pre-authentication webmail login page, allowing successful attackers to run arbitrary javascript code in the security context of their victim's browser...
CVE-2017-3125
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
CVE-2017-3125
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
Design/Logic Flaw
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
CVE-2017-3125
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
CVE-2017-3125
CVE-2017-3125 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail. Affected versions: FortiMail 5.0.0–5.2.9 and 5.3.0–5.3.8. An attacker can trick a logged-in user into clicking a crafted URL, enabling execution of arbitrary scripts in the user’s browser in...
CVE-2017-3125
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2017-04565)
Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail that stems from a failure to properly filter user-supplied...
Unauthenticated XSS (Cross Site Scripting) in FortiMail
An unauthenticated XSS vulnerability could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker...
FortiManager (Series) - Multiple Web Vulnerabilities
Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Bulletin:...
Fortinet FortiMail < 4.3.7 / 5.0.x < 5.0.2 Fragmented IPv6 Packet Handling DoS
The version of Fortinet FortiMail installed on the remote host is prior to 4.3.7 / 5.0.2. It is, therefore, affected by a denial of service vulnerability due to improper handling of fragmented IPv6 packets. A remote attacker can exploit this to crash the kernel, resulting in rebooting the device...
Fortinet FortiMail Stored XSS Vulnerability (FG-IR-15-005)
Fortinet FortiMail is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fortinet FortiMail Server Detection via IMAP
Binary data 8732.prm...
Fortinet FortiMail Server Detection via POP3
Binary data 8730.prm...
Fortinet FortiMail Server Detection via POP3S
Binary data 8733.prm...