VULNERABILITY INTELLIGENCE

CVE-2025-25250

CVSS score4.3 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiSASE 25.1.c may allow an authenticated user to access full SSL-VPN settings via crafted URL.

Weakness classification

  • psirt@fortinet.com: CWE-200

Primary references