cvedb.io
CVE-2021-32586
HIGH · CVSS 7.7
EPSS exploitation probability: 0%
Published 2022-03-01T19:15:08.227 · Last modified 2026-06-17T03:53:13.273

Summary

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.

Affected products

fortinet — fortimail

Does this affect you?

Add your gear to cvedb and we'll alert you only when fortinet ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.