CVE-2025-22258
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
- Score
- CVSS 3.1 7.2 High
- Status
- Analyzed - psirt@fortinet.com
- Published
- 2025-10-14
- Last modified
- 2026-10-18
- Weaknesses
- CWE-122
Affected products
- Fortios (Fortinet)
- Fortipam (Fortinet)
- Fortiproxy (Fortinet)
- Fortisra (Fortinet)
- Fortiswitchmanager (Fortinet)
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-546
