VULNERABILITY INTELLIGENCE
CVE-2019-15712
CVSS score7.2 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2020-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory