VULNERABILITY INTELLIGENCE

CVE-2025-52970

CVSS score8.1 HIGH
EPSS probability10.13%
CISA KEVNot currently listed
Published2025-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.

Weakness classification

  • CWE-233: Improper Handling of Parameters

Primary references