CVE-2017-7732

Published: Oct 26, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.

Affected (36)

Products: Fortinet: Fortimail

Fortinet

1 product

Fortimail

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimail	Version 4.1.0
Fortinet Fortimail	Version 4.2.0
Fortinet Fortimail	Version 4.3.0
Fortinet Fortimail	Version 4.3.8
Fortinet Fortimail	Version 5.0.10
Fortinet Fortimail	Version 5.0.1
Fortinet Fortimail	Version 5.0.2
Fortinet Fortimail	Version 5.0.3
Fortinet Fortimail	Version 5.0.4
Fortinet Fortimail	Version 5.0.5
Fortinet Fortimail	Version 5.0.6
Fortinet Fortimail	Version 5.0.7
Fortinet Fortimail	Version 5.0.8
Fortinet Fortimail	Version 5.0.9
Fortinet Fortimail	Version 5.0
Fortinet Fortimail	Version 5.1
Fortinet Fortimail	Version 5.2.1
Fortinet Fortimail	Version 5.2.2
Fortinet Fortimail	Version 5.2.3
Fortinet Fortimail	Version 5.2.4
Fortinet Fortimail	Version 5.2.5
Fortinet Fortimail	Version 5.2.6
Fortinet Fortimail	Version 5.2.7
Fortinet Fortimail	Version 5.2.8
Fortinet Fortimail	Version 5.2.9
Fortinet Fortimail	Version 5.2
Fortinet Fortimail	Version 5.3.1
Fortinet Fortimail	Version 5.3.2
Fortinet Fortimail	Version 5.3.3
Fortinet Fortimail	Version 5.3.4
Fortinet Fortimail	Version 5.3.5
Fortinet Fortimail	Version 5.3.6
Fortinet Fortimail	Version 5.3.7
Fortinet Fortimail	Version 5.3.8
Fortinet Fortimail	Version 5.3.9
Fortinet Fortimail	Version 5.3