Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-59921

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests.

  • Published: Oct 14, 2025
  • Updated: Nov 17, 2025
  • CVE: CVE-2025-59921
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
fortinet / fortiadc 6.2.0 7.1.5
fortinet / fortiadc 7.2.0 7.2.4
fortinet / fortiadc 7.4.0 7.4.0.x