CVE-2025-25253

medium Fortinet
CVSS v3 Base Score
6.8
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
EPSS Score
0.1%
Exploitation probability in 30 days
Top 99% most likely to be exploited
Attack Characteristics
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Confidentiality
High
Integrity
High
Availability
High
Published: October 14, 2025 (327 days ago)
Last Modified: August 11, 2026
Vendor: Fortinet
Source: MITRE

Description

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy

CWE

CWE-297

Affected Products

Fortinet FortiProxyFortinet FortiOSFortinet FortiPAM

References

🔗 fortiguard.fortinet.com