Lucene search
FortinetCVELIST:CVE-2021-24007HistoryJul 09, 2021 - 6:37 p.m.
CVE-2021-24007
2021-07-0918:37:57
fortinet
www.cve.org
3
fortimail
sql injection
unauthorized code execution
http requests
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.007
Percentile
80.6%
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CNA Affected
[
{
"product": "Fortinet FortiMail",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiMail before 6.4.4"
}
]
}
]References
Related
prion
prion
Sql injection
2021-07-09 19:15:00
fortinet
fortinet
FortiMail - SQL Injection vulnerabilities
2021-07-07 00:00:00
cve
cve
CVE-2021-24007
2021-07-09 19:15:08
nvd
nvd
CVE-2021-24007
2021-07-09 19:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.007
Percentile
80.6%
Related for CVELIST:CVE-2021-24007