CVE-2025-25250

No fix known EPSS <1%CVSS 3.9

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiSASE 25.1.c may allow an authenticated user to access full SSL-VPN settings via crafted URL.

Published 2025-06-10 · CVE record · OSV

Products: Fortinet FortiOS, Fortinet FortiSASE, Siemens RUGGEDCOM APE1808