CVE-2019-6696

An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL…

published March 15, 2020

CVSS
—
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00698 · 52.6th percentile
Published
2020-03-15T22:03Z
EPSS history
Timeline
  • 15 MAR 22:03Z
    An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL…
    cvelistv5