CVE-2025-64446
CVSS9,8Kritično
EPSS (30 dni)91,1 %
CISA KEVDaod 14. 11. 2025
Rok za popravek (CISA)21. 11. 2025
Proizvajalec: Fortinet · Izdelki: fortiweb
Uporaba v izsiljevalskih napadih: Ni podatka
Opis (NVD, angleško): A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H