VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026

CVE-2021-24015

CVE-2021-24015

Description

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Affected products

3
  • Fortinet/Fortimail3 versions
    cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=5.4.0,<=5.4.12
    • (no CPE)range: <6.4.4
    • (no CPE)range: FortiMail before 6.4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.