CVE-2025-59809 — Fortinet / FortiSOAR on-premise

Description (CNA)

A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.4, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to discover services running on local ports via crafted requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSOAR on-premise	affected 7.6.4; affected 7.6.0 through 7.6.2; affected 7.5.0 through 7.5.2; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3
Fortinet / FortiSOAR PaaS	affected 7.6.4; affected 7.6.0 through 7.6.2; affected 7.5.0 through 7.5.2; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3

CWE

CWE-918

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-103

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.