CVE-2020-9294 vulnerability in Fortinet Products
Published on April 27, 2020
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.
Products Associated with CVE-2020-9294
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-9294 are published in these products:
Affected Versions
Fortinet FortiMail:- Version 5.4.10 is affected.
- Version 6.0.7 is affected.
- Version 6.2.2 and earlier is affected.
- Version 6.0.0 is affected.
- Version 6.0.1 is affected.
Exploit Probability
EPSS
80.13%
Percentile
99.06%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.