CVE-2021-32586

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the…

High · published March 1, 2022

CVSS v3.1
7.7
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.01055 · 64.1th percentile
Published
2022-03-01T18:20Z
EPSS history
Timeline
  • 01 MAR 18:20Z
    An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the…
    cvelistv5