Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2025-64446

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

  • Published: Nov 14, 2025
  • Updated: Nov 15, 2025
  • CVE: CVE-2025-64446
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortiweb 7.0.0 7.0.12
fortinet / fortiweb 7.2.0 7.2.12
fortinet / fortiweb 7.4.0 7.4.10
fortinet / fortiweb 7.6.0 7.6.5
fortinet / fortiweb 8.0.0 8.0.2