CVE-2025-31514CWE-532

CVE-2025-31514

Low · published October 14, 2025

CVSS v3.1

2.7

EPSS

Percentile

28.7

In the wild

Unconfirmed

What it is

A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>

The record

Technical detail

CVSS v3.1: 2.7 · LOW
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00361 · 28.7th percentile
Weakness: CWE-532 · Insertion of Sensitive Information into Log File
Published: 2025-10-14T20:15Z

Affected products (2)

Product	Versions	Fixed in
fortinet/fortios	≥ 6.4.0, < 7.6.4	7.6.4
fortinet/fortiproxy	≥ 7.0.0, < 7.6.4	7.6.4

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-24-452 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-864900.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

EPSS history

Timeline

14 OCT 15:23Z
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions…
cvelistv5