VULNERABILITY INTELLIGENCE

CVE-2021-32586

CVSS score7.7 HIGH
EPSS probability1.05%
CISA KEVNot currently listed
Published2022-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Description

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references