Unscored severity · published Feb 4, 2013
CVE-2013-1471
Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Fortimail · Fortinet
through 4.0; 3.0; 3.0; 3.0; 3.0; 4.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1471
Vendor Advisory
http://www.fortiguard.com/advisory/FG-IR-013-001.html
www.vulnerability-lab.com
http://www.vulnerability-lab.com/get_content.php?id=701
Exploit
http://www.youtube.com/watch?v=5d7cIaM80oY
More from Fortimail
9.8
CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
9.8
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
9.8
CVE-2023-47539
An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker…
9.8
CVE-2021-32586
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the…
9.8
CVE-2021-36166
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of…