CVE-2013-1471

medium Fortinet
CVSS v3 Base Score
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS Score
4.9%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None
Published: February 4, 2013 (4846 days ago)
Last Modified: April 29, 2026
Vendor: Fortinet
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.

CWE

CWE-79

Affected Products

fortinet fortimail

References

🔗 www.fortiguard.com 🔗 www.vulnerability-lab.com 🔗 www.youtube.com 🔗 www.fortiguard.com 🔗 www.vulnerability-lab.com