CVE-2021-32586
- State
- Published
- Severity
- 7.7 High
- Published
- Mar 1, 2022
- Updated
- Oct 25, 2024
- Reserved
- May 11, 2021
Description
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X | fortinet |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Fortinet FortiMailFortinet |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.