Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2023-25602

A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, FortiWeb 5.8 all versions, FortiWeb 5.7 all versions, FortiWeb 5.6 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.

  • Published: Feb 16, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-25602
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortiweb 6.2.0 6.2.7
fortinet / fortiweb 6.4.0 6.4.2.x
fortinet / fortiweb 6.1.0 6.1.3
fortinet / fortiweb 6.0.0 6.0.8
fortinet / fortiweb 5.6.0 5.9.2
fortinet / fortiweb 6.3.0 6.3.18