| Package | Affected versions | Patched versions |
|---|---|---|
| fortimail | = 5.0= 5.0.10= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 5.1= 5.1.2= 5.1.3= 5.1.5= 5.1.6= 5.2= 5.2.1= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9= 5.3= 5.3.1= 5.3.2= 5.3.3= 5.3.4= 5.3.5= 5.3.6= 5.3.7= 5.3.8 |
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free