VULNERABILITY INTELLIGENCE

CVE-2019-15705

CVSS score7.5 HIGH
EPSS probability1.80%
CISA KEVNot currently listed
Published2019-11-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references