Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-43062
HistoryFeb 02, 2022 - 11:15 a.m.

CVE-2021-43062

2022-02-0211:15:07
CWE-79
[email protected]
web.nvd.nist.gov
25
fortinet fortimail
cross-site scripting
unauthorized code execution
http get requests
fortiguard uri protection service

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.006

Percentile

78.2%

JSON

A improper neutralization of input during web page generation (‘cross-site scripting’) in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service.

Affected configurations

Nvd
Node
fortinetfortimailRange6.2.0–6.2.8
OR
fortinetfortimailRange6.4.0–6.4.6
OR
fortinetfortimailRange7.0.0–7.0.2
VendorProductVersionCPE
fortinetfortimail*cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*

Related

packetstorm 1
nuclei 1
cve 1
cvelist 1
exploitdb 1
zdt 2
cnvd 1
fortinet 1
prion 1
packetstorm
packetstorm
Fortinet Fortimail 7.0.1 Cross Site Scripting
2022-02-18 00:00:00
nuclei
nuclei
Fortinet FortiMail 7.0.1 - Cross-Site Scripting
2022-02-21 12:58:24
cve
cve
CVE-2021-43062
2022-02-02 11:15:07
cvelist
cvelist
CVE-2021-43062
2022-02-02 11:08:07
exploitdb
exploitdb
Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting (XSS)
2022-02-18 00:00:00
zdt
zdt
Fortinet Fortimail 7.0.1 - Reflected Cross-Site Scripting Vulnerability
2022-02-18 00:00:00
Wondershare UBackit 2.0.5 - (wsbackup) Unquoted Service Path Vulnerability
2022-02-18 00:00:00
cnvd
cnvd
Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2022-19073)
2022-02-08 00:00:00
fortinet
fortinet
FortiMail - reflected cross-site scripting vulnerability in FortiGuard URI protection
2022-02-01 00:00:00
prion
prion
Cross site scripting
2022-02-02 11:15:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.006

Percentile

78.2%

JSON
Related for NVD:CVE-2021-43062
packetstorm1nuclei1cve1cvelist1exploitdb1zdt2cnvd1fortinet1prion1