$ cve CVE-2013-1471 JSON

CVE-2013-1471 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 2.4% (pctl 84)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	2.44% — more likely to be exploited than 84% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2013-02-04
Last modified	2026-06-16

Affected (6)

Vendor	Product
fortinet	fortimail
fortinet	fortimail-2000b
fortinet	fortimail-200d
fortinet	fortimail-400c
fortinet	fortimail-5002b
fortinet	fortimail-vm2000

Public exploits

Source	Title	Date
exploit-db	Fortinet FortiMail 400 IBE - Multiple Vulnerabilities	2013-01-29

References

→ the Explorer · watch your stack · NVD