CVE-2021-24015
- State
- Published
- Severity
- 7.2 High
- Published
- Jul 12, 2021
- Updated
- Oct 25, 2024
- Reserved
- Jan 13, 2021
Description
An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | fortinet |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Fortinet FortiMailFortinet |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.