URL exemption for domain names does not work with aggressive URI-checking.

Disclaimer Insertion action is logged but no disclaimer is inserted in the email.

Outbound email from FortiMail Cloud occasionally fails DKIM check.

Return code from DNSBL events of spamhaus.org is not handled properly.

OpenSSL encrypted files (.enc files) are not detected by the correct file type.

Some .docx files may not be processed properly when antivirus is enabled.

SPF records using macros are not handled properly.

DKIM verification may fail due to DKIM signature format reasons.

User-defined variables cannot be used in email templates.

In some cases, a single email may be sent to personal quarantine numerous times.

Authentication-Results header placement doesn't follow RFC7601.

The initial SMTP greeting message 220 is sent after about four seconds, instead of instantly.

When some LDAP profiles have network connection issues, all LDAP profiles may not work properly.

Upgrade issue from 6.0.x to 6.2.x releases.

Unable to configure distinguished name (DN) with more than 127 characters.

If the mail data is scheduled to be backed up with one copy only, the new backup does not overwrite the old ones.

In active-passive HA mode, when disabling admin/web access to one port, access to another port may also be disabled.

When the full config file is backed up via TFTP, the file cannot be decompressed correctly.

Incorrect Japanese translation in custom messages.

High CPU usage when scanning PDF files.

Traffic capture duration setting does not work properly.

AWS VM license will be disabled after a few hours as duplicate by getting code 401.

High CPU due to the "expireenc" process.

Updating an LDAP password that does not meets the LDAP server's password policy returns a wrong message at FortiMail webmail.

Mail data gets corrupted after transferred to a NAS device.

In server mode config-only HA, multiple calendar event reminders are sent to users.

Failed to check certificate revocation status when validating FortiAnalyzer's server certificate.

Increase the log field length of From and To in history logs.

Missing event log and SNMP trap for RAID events.

No system event log is created for power supply issues.

Webmail access cannot be completely disabled.

SNMP trap and query options are missing from the GUI when adding SNMP communities and users.

In gateway mode, sub-domain based administrators with read & write access cannot access domain based settings.

When replying all in webmail, the sender email is also included in the recipient list.

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-329: Not Using a Random IV with CBC Mode

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-20: Improper Input Validation