CVE-2019-5592

5.9 mediumEPSS 0.7%

Medium (5.9) in fortinet fortios ips engine. EPSS 0.7% chance of exploitation in the next 30 days.

Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2019-08-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios_ips_engine

References

https://fortiguard.com/advisory/FG-IR-19-145
https://fortiguard.com/advisory/FG-IR-19-145

Check your stack JSON