critical9.8
CVE-2021-24007
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execut…
Impact
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimail | through 5.4.12 from 5.6.1 before 6.0.11 from 6.2.0 before 6.2.7 from 6.4.0 before 6.4.4 |