| Package | Affected versions | Patched versions |
|---|---|---|
| fortimail | = 6.4.0≥ 6.0.0, < 6.0.10≥ 6.2.1, < 6.2.5 | 6.0.106.2.5 |
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free