CVE-2019-15712

HIGH

FortiMail 5.4.10 and below, 6.0.0-6.0.6, 6.2.0 - Improper Access Control in Admin WebUI

Title source: llm

Description

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://fortiguard.com/advisory/FG-IR-19-237

Scores

CVSS v3 7.2

EPSS 0.0051

EPSS Percentile 66.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

Status published

Products (2)

fortinet/fortimail 6.2.0

fortinet/fortimail < 5.4.10

Published Jan 23, 2020

Tracked Since Feb 18, 2026