CVE-2019-5589
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Risk Assessment
An attacker could exploit the untrusted search path to execute malicious code, potentially leading to system compromise or data breach.
Recommendation
Apply patches from Fortinet and ensure search paths are securely configured.
Other vulnerabilities in Fortinet
See all- CVE-2023-27997CriticalActively exploited
Heap-based buffer overflow in SSL-VPN in FortiOS and FortiProxy, allowing a remote attacker to execute arbitrary code or commands via specially crafted requests.
- CVE-2020-12811Medium
A basic XSS vulnerability in Fortinet products due to improper neutralization of script-related HTML tags. An attacker may execute unauthorized code or commands via network exploitation.
- CVE-2020-9290High
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
- CVE-2020-9287High
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
Original NVD description (English source)
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

