CVE-2019-15712: Fortinet FortiMail

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.

Affected products

• Fortinet FortiMail: up to and including 5.4.10; from 6.0.0, up to and including 6.0.6; version 6.2.0 only

Published 2020-01-23. Last modified 2026-06-17.