medium6.5
CVE-2025-22258
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.…
Impact
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | from 7.0.2 before 7.0.17 from 7.2.0 before 7.2.11 from 7.4.0 before 7.4.7 from 7.6.0 before 7.6.3 |
| Fortinet | Fortipam | from 1.0.0 before 1.4.3 Version 1.5.0 |
| Fortinet | Fortiproxy | from 7.4.0 before 7.4.8 from 7.6.0 before 7.6.2 |
| Fortinet | Fortisra | from 1.4.0 before 1.4.3 Version 1.5.0 |
| Fortinet | Fortiswitchmanager | from 7.2.1 before 7.2.6 |