CVE-2021-24013: Fortinet FortiMail

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.

Affected products

• Fortinet FortiMail: from 5.4.0, up to and including 5.4.12; from 6.0.0, before 6.0.11 (fixed in 6.0.11); from 6.2.0, before 6.2.7 (fixed in 6.2.7); from 6.4.0, before 6.4.4 (fixed in 6.4.4)

Published 2021-07-12. Last modified 2026-06-17.