Vulnerabilities fixed in Fortinet FortiOS

🗓️ 12 Jun 2025 11:04:45Reported by NCSCType

Fortinet fixed FortiOS vulnerabilities for revoked certificates and privilege escalation; updates released.

Reporter	Title	Published	Views	Family All 129
GithubExploit	Exploit for Insufficient Session Expiration in Fortinet Fortisase	20 Jun 202510:56	–	githubexploit
ATTACKERKB	CVE-2025-22254	10 Jun 202517:21	–	attackerkb
ATTACKERKB	CVE-2025-25250	10 Jun 202517:21	–	attackerkb
BDU FSTEC	The vulnerability of the Automation Stitch component in operating systems FortiOS and FortiProxy servers for protecting against Internet attacks allows attackers to bypass authentication procedures and gain increased privileges.	28 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Fortinet FortiClientWindows security devices, related to improper verification of certificate authenticity, allows attackers to perform spear-phishing attacks.	18 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of FortiOS operating systems arises from insufficient restrictions on communication channels for specified endpoints, allowing attackers to implement unauthorized sessions.	9 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of FortiOS operating systems and FortiProxy proxy servers related to incomplete cleanup of temporary or auxiliary resources allows attackers to increase their privileges.	9 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The server for managing Fortinet FortiClient Enterprise Management Server programs is vulnerable, due to insufficient checking of incoming requests. This vulnerability allows attackers to execute SSRF attacks.	9 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) management server stems from authentication procedures that have flaws. This allows attackers to gain unauthorized access to modify, add, or delete data.	9 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FortiOS graphical interface and the scalable cloud security system FortiSASE, related to insufficient protection of operational data, allows attackers to gain full access to SSL-VPN settings.	9 Oct 202500:00	–	bdu_fstec

Vulners

Node

fortinet fortiosMatch6.2.17

fortinet fortiosRange7.6.0–7.6.1

fortinet fortiosRange6.2.0–6.2.17

fortinet fortiosRange6.4.0–6.4.16

fortinet fortiosRange7.0.0–7.0.17

fortinet fortiosRange7.2.0–7.2.11

fortinet fortiosRange7.4.0–7.4.7

fortinet fortiproxyRange1.1.0–1.1.6

fortinet fortiproxyRange1.2.0–1.2.13

fortinet fortiproxyRange2.0.0–2.0.14

fortinet fortiproxyRange7.0.0–7.0.20

fortinet fortiproxyRange7.2.0–7.2.14

fortinet fortiproxyRange7.4.0–7.4.7

fortinet forticlientemsMatch7.4.0

fortinet forticlientemsRange7.2.0–7.2.4

fortinet forticlientemsRange7.0.0–7.0.13

fortinet fortiwebRange7.4.0–7.4.6

fortinet fortiwebRange7.6.0–7.6.1

fortinet fortisaseMatch24.4.b

fortinet fortisaseMatch25.1.a.2

fortinet fortisaseMatch25.1.c

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-23-008
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-23-342
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-23-375
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-058
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-257
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-339
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-365
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-544
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-25-006
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-287

12 Jun 2025 11:04Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.6 - 7.2

EPSS0.01076

SSVC