Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-31514

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command.

  • Published: Oct 14, 2025
  • Updated: Nov 17, 2025
  • CVE: CVE-2025-31514
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.7
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
fortinet / fortios 6.4.0 7.6.4
fortinet / fortiproxy 7.0.0 7.6.4