· zachyceno
EPSS 0.00
FortiMail SQL command injection in webmail
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 7.7, CVEs: CVE-2025-57739, Summary: An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Fortinet FI
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2025-57739 | 7.7 3.1 · fortinet | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.7.