CVE-2019-6143
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.
Key facts
- CVSS score
- 9.1 (v3.1)
- Severity
- CRITICAL
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N- Weakness (CWE)
- CWE-287
- EPSS score
- 1.1% (66th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2019-15710)
- Published
- August 20, 2019
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2019-15710 in the EU Vulnerability Database. Last updated in EUVD on August 4, 2024.
View on the EU Vulnerability DatabaseAffected products
- forcepoint / next generation firewall
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Forcepoint Next Generation Firewall - Forcepoint - FIPS 140 3317 - historical
References
- https://help.forcepoint.com/security/CVE/CVE-2019-6143.html(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain