CVE-2019-15707

4.9 mediumEPSS 1.3%

Medium (4.9) in fortinet fortimail. EPSS 1.3% chance of exploitation in the next 30 days.

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2020-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimail

References

https://fortiguard.com/advisory/FG-IR-19-237
https://fortiguard.com/advisory/FG-IR-19-237

Check your stack JSON