Medium severity · published Feb 2, 2022
CVE-2021-43062
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and…
6.1
CVSS
12.9%
EPSS
No
On KEV
Description
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)12.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Fortimail · Fortinet
6.2.0 before 6.2.8; 6.4.0 before 6.4.6; 7.0.0 before 7.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-43062
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-43062
Exploit
http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html
Vendor Advisory
https://fortiguard.com/advisory/FG-IR-21-185
More from Fortimail
9.8
CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
9.8
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
9.8
CVE-2023-47539
An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker…
9.8
CVE-2021-32586
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the…
9.8
CVE-2021-36166
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of…