by Kastro
Paper/Archive/CVE-2025-25257

CVE-2025-25257

Fortinet FortiWeb — Fortinet FortiWeb SQL Injection Vulnerability

KEV · due 8 AugEPSS 100%public exploitSSVC actCVSS 9.6
critical.is priorityof 100
99
CVSS 9.6 (CNA)9.6 / 10 × 3028.8In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

Affected

ProductAffectedFixed inSource
FortiWeb7.6.0 – 7.6.3–CNA
FortiWeb7.4.0 – 7.4.7–CNA
FortiWeb7.2.0 – 7.2.10–CNA
FortiWeb7.0.0 – 7.0.10–CNA

Scores by source

fortinet (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-151exploitgithub.com/0xbigshaq/CVE-2025-25257refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25257refexploit-db.com/exploits/52473refpacketstorm.news/files/id/210193kevcisa.gov/known-exploited-vulnerabilities-catalog