9.8

CVE-2019-6139: forcepoint . forcepoint user id (fuid) server

CVSS: 9.8v3.1CriticalModified
Published 07-02-2019Last modified 17-09-2024
Open JSON

Vulnerability summary

CVE-2019-6139 is a critical (CVSS 9.8) vulnerability in forcepoint . forcepoint user id (fuid) server. EPSS estimates a 2.36% chance of exploitation in the next 30 days, higher than 83.5% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
2.36%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 07-02-2019
    PublishedVulnerability first disclosed.
  2. 17-09-2024
    Last modifiedVulnerability information updated.

Description

Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001. FUID requires this port only for local connections through the loopback interface.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

2.36%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.36% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Forcepoint1 product
Forcepoint .1 product

2 vendors · 2 products

References

1 links