← CVE Intelligence

CVE-2025-25250

Fortinet / FortiOS PUBLISHED

Description (CNA)

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiSASE 25.1.c may allow an authenticated user to access full SSL-VPN settings via crafted URL.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.6.0; affected 7.4.0 through 7.4.7; affected 7.2.0 through 7.2.13; affected 7.0.0 through 7.0.19; affected 6.4.0 through 6.4.16
Fortinet / FortiSASEaffected 25.1.c

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.