Vulnerability Database

319,590

Total vulnerabilities in the database

CVE-2025-62631

An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's password change under particular conditions outside of the attacker's control

  • Published: Dec 9, 2025
  • Updated: Jan 15, 2026
  • CVE: CVE-2025-62631
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.6
  • AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortios 6.4.0 7.4.1