CVE-2025-25257 1

Vulnerability (CVE)

CVE-2025-25257: Fortinet Forti Web SQL Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 18, 2025

Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

Vulnerabilities & Patching