CVE-2014-8617

no score yetEPSS 1.2%

fortinet fortimail: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2015-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimail

References

http://seclists.org/fulldisclosure/2015/Mar/5
http://www.fortiguard.com/advisory/FG-IR-15-005/
http://www.securitytracker.com/id/1031859
http://seclists.org/fulldisclosure/2015/Mar/5
http://www.fortiguard.com/advisory/FG-IR-15-005/

Check your stack JSON