FortiMail
No CISA KEV deadline is open. CISA last added a FortiMail CVE on 1 Oct.
Tracked since 1 Oct · latest article Tue 13 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
7 articles from 5 outlets since 1 Oct; the latest 13 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 13 Oct · 19:24 UTC | SecurityOnline | Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks |
| Mon 5 Oct · 04:06 UTC | SecurityOnline | Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk |
| Fri 2 Oct · 08:22 UTC | SecurityWeek | Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTP |
| Fri 2 Oct · 06:35 UTC | The Hacker News | Fortinet FortiMail Zero Day Exploited in Attacks, CISA Warns |
| Fri 2 Oct · 06:35 UTC | Security Affairs | CISA Warns FortiMail Flaw Is Being Exploited in the Wild |
| Thu 1 Oct · 23:35 UTC | SecurityOnline | FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks |
| Thu 1 Oct · 20:03 UTC | CISA | CISA Flags Fortinet FortiMail Flaw Under Active Exploitation |
Who reported 5 outlets, last 12 months
- SecurityOnline3
- CISA1
- Security Affairs1
- The Hacker News1
- SecurityWeek1
- Fortinet Patches Critical Flaws Enabling Unauthenticated Remote AttacksSecurityOnline
- Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at RiskSecurityOnline
- Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTPSecurityWeek
- Fortinet FortiMail Zero Day Exploited in Attacks, CISA WarnsThe Hacker News
- CISA Warns FortiMail Flaw Is Being Exploited in the WildSecurity Affairs
- FortiMail Flaw Exploited in the Wild, Exposing Corporate NetworksSecurityOnline
- CISA Flags Fortinet FortiMail Flaw Under Active ExploitationCISA · official notice
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.