by Kastro
Paper/Archive/CVE-2025-64446

CVE-2025-64446

Fortinet FortiWeb — Fortinet FortiWeb Path Traversal Vulnerability

KEV · due 21 NovEPSS 91%public exploitSSVC actCVSS 9.4
critical.is priorityof 100
98
CVSS 9.4 (CNA)9.4 / 10 × 3028.2In CISA KEV+3030.0EPSS percentile 99.8.998 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Affected

ProductAffectedFixed inSource
FortiWeb8.0.0 – 8.0.1–CNA
FortiWeb7.6.0 – 7.6.4–CNA
FortiWeb7.4.0 – 7.4.9–CNA
FortiWeb7.2.0 – 7.2.11–CNA
FortiWeb7.0.0 – 7.0.11–CNA

Scores by source

fortinet (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-910refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446exploitgithub.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypasskevcisa.gov/known-exploited-vulnerabilities-catalog