FortiMail 5.2
Fortinet, Inc. - FIPS 140 #2539
The FortiMail family of email security appliances provide an effective barrier against the ever-rising volume of sophisticated spam and malware and includes features designed to facilitate regulatory compliance. FortiMail 5.2 offers both inbound and outbound scanning, advanced antispam and antivirus filtering capabilities, malware emulation both locally and via integration with FortiSandbox, data leak prevention, identity based encryption and extensive quarantine and archiving capabilities.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2539
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Fortinet, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- DXC Technology
- First validated
- January 25, 2016
- Versions
- FortiMailOS 5.2, build0460,150922
- Caveat
- When operated in FIPS mode with the tamper evident seals installed as indicated in the Security Policy and configured according to the Entropy Token Section of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy. There is no assurance of the minimum strength of generated keys
Algorithms
- AES
- CVL
- DRBG
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-36166CRITICAL 9.8EPSS 1.5%
- CVE-2021-24007CRITICAL 9.8EPSS 1.4%
- CVE-2020-9294CRITICAL 9.8EPSS 77.8%
- CVE-2021-22129HIGH 8.8EPSS 1.1%
- CVE-2021-32586HIGH 7.7EPSS 1.1%
- CVE-2019-15712HIGH 7.2EPSS 1.0%
- CVE-2017-7732MEDIUM 6.1EPSS 2.1%
- CVE-2017-3125MEDIUM 6.1EPSS 1.1%
- CVE-2021-26100MEDIUM 5.9EPSS 0.3%
- CVE-2022-26114MEDIUM 5.4EPSS 0.5%
- CVE-2021-32591MEDIUM 5.3EPSS 0.9%
- CVE-2020-15933MEDIUM 5.3EPSS 0.8%
- CVE-2019-15707MEDIUM 4.9EPSS 1.3%
- CVE-2021-26099MEDIUM 4.4EPSS 0.5%
- CVE-2014-8617MEDIUM 4.3EPSS 1.2%
- CVE-2015-3293MEDIUM 4.0EPSS 1.0%
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain