Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2025-25250

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS version 7.6.0, version 7.4.7 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions SSL-VPN web-mode may allow an authenticated user to access full SSL-VPN settings via crafted URL.

  • Published: Jun 10, 2025
  • Updated: Jul 23, 2025
  • CVE: CVE-2025-25250
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
fortinet / fortios 7.6.0 7.6.0.x
fortinet / fortios 6.4.0 7.4.8
fortinet / fortisase 25.1.75 25.1.75.x