CVE-2013-1471

Published: Feb 4, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.

Affected (8)

Products: Fortinet: Fortimail

Fortinet

1 product

Fortimail

Configuration A

8 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Fortinet Fortimail	Up to 4.0
Fortinet Fortimail	Version 3.0 mr2
Fortinet Fortimail	Version 3.0 mr3
Fortinet Fortimail	Version 3.0 mr4
Fortinet Fortimail	Version 3.0 mr5
Fortinet Fortimail	Version 4.0
Fortinet Fortimail	Version 4.0 mr1
Fortinet Fortimail	Version 4.0 mr2

Running on/with	Platform Versions
Fortinet Fortimail 2000b	All versions
Fortinet Fortimail 200d	All versions
Fortinet Fortimail 400c	All versions
Fortinet Fortimail 5002b	All versions
Fortinet Fortimail Vm2000	All versions