CVE-2025-59921CWE-200information-disclosure

CVE-2025-59921

Medium · published October 14, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00303 · 21.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-14T20:15Z
Affected products (3)
ProductVersionsFixed in
fortinet/fortiadc≥ 6.2.0, < 7.1.57.1.5
fortinet/fortiadc≥ 7.2.0, < 7.2.47.2.4
fortinet/fortiadcall versions—
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-23-434 · [email protected]
EPSS history
Timeline
  • 14 OCT 15:23Z
    An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version…
    cvelistv5