CVE-2017-7732: Fortinet FortiMail

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.

Affected products

• Fortinet FortiMail: version 4.1.0 only; version 4.2.0 only; version 4.3.0 only; version 4.3.8 only; version 5.0 only; version 5.0.1 only; …

Published 2017-10-26. Last modified 2026-06-17.