CVE-2025-22258
14.10.2025, 16:15
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortios | 7.0.2 ≤ 𝑥 < 7.0.17 |
| fortinet | fortios | 7.2.0 ≤ 𝑥 < 7.2.11 |
| fortinet | fortios | 7.4.0 ≤ 𝑥 < 7.4.7 |
| fortinet | fortios | 7.6.0 ≤ 𝑥 < 7.6.3 |
| fortinet | fortipam | 1.0.0 ≤ 𝑥 < 1.4.3 |
| fortinet | fortipam | 1.5.0 |
| fortinet | fortiproxy | 7.4.0 ≤ 𝑥 < 7.4.8 |
| fortinet | fortiproxy | 7.6.0 ≤ 𝑥 < 7.6.2 |
| fortinet | fortisra | 1.4.0 ≤ 𝑥 < 1.4.3 |
| fortinet | fortisra | 1.5.0 |
| fortinet | fortiswitchmanager | 7.2.1 ≤ 𝑥 < 7.2.6 |
𝑥
= Vulnerable software versions