We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-26114



Assignerfortinet
Reserved2022-02-25
Published2022-09-06
Updated2024-10-22

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting (XSS) attack via sending specially crafted mail messages.



MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C

Product status

FortiMail before 7.2.0
affected

References

https://fortiguard.com/psirt/FG-IR-21-045

cve.org CVE-2022-26114

nvd.nist.gov CVE-2022-26114

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.