CVE-2013-1471

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE)…

published February 4, 2013

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02437 · 84.2th percentile
Published
2013-02-04T19:00Z
EPSS history
Timeline
  • 04 FEB 19:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE)…
    cvelistv5