Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2025-62631

An insufficient session expiration vulnerability [CWE-613] in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's password change under particular conditions outside of the attacker's control

  • Published: Dec 9, 2025
  • Updated: Dec 10, 2025
  • CVE: CVE-2025-62631
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.6
  • AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortios 6.4.0 7.4.1