Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-25255

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0.1 through 7.0.21, and FortiOS 7.6.0 through 7.6.3 explicit web proxy may allow an authenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests.

  • Published: Oct 14, 2025
  • Updated: Nov 17, 2025
  • CVE: CVE-2025-25255
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWEs:

Software From Fixed in
fortinet / fortiproxy 7.0.1 7.6.4
fortinet / fortios 7.6.0 7.6.4