CVE-2025-25253CWE-297

CVE-2025-25253

High · published October 14, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-297 · Improper Validation of Certificate with Host Mismatch
Published
2025-10-14T20:15Z
Affected products (4)
ProductVersionsFixed in
fortinet/fortiproxy≥ 7.0.0, < 7.4.97.4.9
fortinet/fortiproxy≥ 7.6.0, < 7.6.27.6.2
fortinet/fortios≥ 7.0.0, < 7.4.97.4.9
fortinet/fortios≥ 7.6.0, < 7.6.37.6.3
References (2)
https://fortiguard.fortinet.com/psirt/FG-IR-24-457 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-864900.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 14 OCT 15:22Z
    An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all…
    cvelistv5