551 matches found
CVE-2014-8617
Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...
CVE-2014-8617
Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...
CVE-2014-8617
Fortinet FortiMail WebGUI is affected by a stored XSS in the Web Action Quarantine Release feature. The vulnerability (CVE-2014-8617) allows an attacker to inject arbitrary web script or HTML via the release parameter to module/releasecontrol. Affected versions are FortiMail before 4.3.9, 5.0.x b...
Fortinet FortiMail WebGUI XSS Vulnerability (FG-IR-15-005)
Fortinet FortiMail is prone to a cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2014-8617: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...
Fortimail 5.2.1 Cross Site Scripting
I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in Fortimail version 5.2.1 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low latency, and...
Fortinet FortiMail Web Action Quarantine Release Feature Cross-Site Scripting Vulnerability
Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail, which arises from the program's failure to adequately filter...
Fortinet FortiMail Detection (SSH Login)
SSH login-based detection of Fortinet FortiMail. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fortinet FortiMail 400 IBE Multiple Vulnerabilities
No description provided by source...
Fortinet FortiMail < 4.3.4 / 5.0.0 Multiple XSS
The remote host is running FortiMail prior to 4.3.4 / 5.0.0. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to a failure to sanitize user-supplied input in the web UI. Specifically, flaws exist in the 'ipmask', 'username', 'address', and 'url' parameters of the...
Fortinet OpenSSL Information Disclosure (Heartbleed)
The firmware of the remote Fortinet host is running a version of OpenSSL that is affected by a remote information disclosure, commonly known as the 'Heartbleed' bug. A remote, unauthenticated, attacker could potentially exploit this vulnerability to extract up to 64 kilobytes of memory per reques...
CVE-2013-1471
Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...
CVE-2013-1471
CVE-2013-1471 describes multiple XSS vulnerabilities in Fortinet FortiMail prior to 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances. The issues arise from insufficient input sanitization in the web UI, specifically in admin/FEAdmin.html (the Add field for the Black List under Antisp...
CVE-2013-1471
Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...
FortiNet FortiMail security vulnerabilities
Different vulnerabilities in Web interface...
CVE-2013-1471: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...
Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities
Title: ====== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Date: ===== 2013-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=701 VL-ID: ===== 701 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: =============...
Fortinet FortiMail 400 IBE - Multiple Vulnerabilities
Fortinet FortiMail 400 IBE - Multiple Vulnerabilities Title: ====== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Date: ===== 2013-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=701 VL-ID: ===== 701 Common Vulnerability Scoring System:...
