CVE-2019-6696

6.1 mediumEPSS 0.7%

Medium (6.1) in fortinet fortios. EPSS 0.7% chance of exploitation in the next 30 days.

An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-11-01)
CWEs: CWE-20, CWE-601
Published: 2020-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.com/psirt/FG-IR-19-179
https://fortiguard.com/psirt/FG-IR-19-179

Check your stack JSON