Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-26114 EUVD-2022-30681GHSA-fj88-8w22-m925

An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an…

Published Sep 6, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting (XSS) attack via sending specially crafted mail messages.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiMail FortiMail before 7.2.0 —

References