cvedb.io
CVE-2019-6139
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2019-02-07T23:29:00.197 · Last modified 2026-06-17T02:38:40.337

Summary

Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001. FUID requires this port only for local connections through the loopback interface.

Affected products

forcepoint — user_id

Does this affect you?

Add your gear to cvedb and we'll alert you only when forcepoint ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.