CVE-2017-3125

Published: Apr 12, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.

Affected (31)

Products: Fortinet: Fortimail

Fortinet

1 product

Fortimail

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimail	Version 5.0.10
Fortinet Fortimail	Version 5.0.5
Fortinet Fortimail	Version 5.0.6
Fortinet Fortimail	Version 5.0.7
Fortinet Fortimail	Version 5.0.8
Fortinet Fortimail	Version 5.0.9
Fortinet Fortimail	Version 5.0
Fortinet Fortimail	Version 5.1.2
Fortinet Fortimail	Version 5.1.3
Fortinet Fortimail	Version 5.1.5
Fortinet Fortimail	Version 5.1.6
Fortinet Fortimail	Version 5.1
Fortinet Fortimail	Version 5.2.1
Fortinet Fortimail	Version 5.2.2
Fortinet Fortimail	Version 5.2.3
Fortinet Fortimail	Version 5.2.4
Fortinet Fortimail	Version 5.2.5
Fortinet Fortimail	Version 5.2.6
Fortinet Fortimail	Version 5.2.7
Fortinet Fortimail	Version 5.2.8
Fortinet Fortimail	Version 5.2.9
Fortinet Fortimail	Version 5.2
Fortinet Fortimail	Version 5.3.1
Fortinet Fortimail	Version 5.3.2
Fortinet Fortimail	Version 5.3.3
Fortinet Fortimail	Version 5.3.4
Fortinet Fortimail	Version 5.3.5
Fortinet Fortimail	Version 5.3.6
Fortinet Fortimail	Version 5.3.7
Fortinet Fortimail	Version 5.3.8
Fortinet Fortimail	Version 5.3