CVE Details
CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
Published: 2026-10-16
CVSS: 5.4 MEDIUM
Product: Fortinet Multiple Products
Due Date: 2026-10-19
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
GitHub PoC
Warning: GitHub PoC repositories are unverified. Some may be fake
or contain malware. Use caution and review code before running anything.
No GitHub PoC data.
FIRST EPSS
EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.
Timeline
CVE Stalker
KEV
MITRE
GitHub
FIRST (EPSS)
MITRE
CVSS
SSVC
References
Show Raw Data
| Key | Remaining Key | Value |
|---|---|---|
| dataType | CVE_RECORD | |
| dataVersion | 5.2 | |
| cveMetadata > | cveId | CVE-2025-61624 |
| cveMetadata > | assignerOrgId | 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 |
| cveMetadata > | state | PUBLISHED |
| cveMetadata > | assignerShortName | fortinet |
| cveMetadata > | dateReserved | 2025-09-29T07:36:48.603Z |
| cveMetadata > | datePublished | 2026-04-14T15:39:51.445Z |
| cveMetadata > | dateUpdated | 2026-10-16T17:54:22.867Z |
| containers > | cna > affected > 0 > vendor | Fortinet |
| containers > | cna > affected > 0 > product | FortiOS |
| containers > | cna > affected > 0 > cpes > 0 | cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 1 | cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 2 | cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 3 | cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 4 | cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 5 | cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 6 | cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 7 | cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 8 | cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 9 | cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 10 | cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 11 | cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 12 | cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 13 | cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 14 | cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 15 | cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 16 | cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 17 | cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 18 | cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 19 | cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 20 | cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 21 | cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 22 | cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 23 | cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 24 | cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 25 | cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 26 | cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 27 | cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 28 | cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 29 | cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 30 | cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 31 | cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 32 | cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 33 | cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 34 | cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 35 | cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 36 | cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 37 | cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 38 | cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 39 | cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 40 | cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 41 | cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 42 | cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 43 | cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 44 | cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 45 | cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 46 | cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 47 | cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 48 | cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 49 | cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 50 | cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 51 | cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 52 | cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 53 | cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 54 | cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 55 | cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 56 | cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 57 | cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 58 | cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 59 | cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 60 | cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 61 | cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 62 | cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 63 | cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 64 | cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > cpes > 65 | cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 0 > defaultStatus | unaffected |
| containers > | cna > affected > 0 > versions > 0 > versionType | semver |
| containers > | cna > affected > 0 > versions > 0 > version | 7.6.0 |
| containers > | cna > affected > 0 > versions > 0 > lessThanOrEqual | 7.6.4 |
| containers > | cna > affected > 0 > versions > 0 > status | affected |
| containers > | cna > affected > 0 > versions > 1 > versionType | semver |
| containers > | cna > affected > 0 > versions > 1 > version | 7.4.0 |
| containers > | cna > affected > 0 > versions > 1 > lessThanOrEqual | 7.4.9 |
| containers > | cna > affected > 0 > versions > 1 > status | affected |
| containers > | cna > affected > 0 > versions > 2 > versionType | semver |
| containers > | cna > affected > 0 > versions > 2 > version | 7.2.0 |
| containers > | cna > affected > 0 > versions > 2 > lessThanOrEqual | 7.2.13 |
| containers > | cna > affected > 0 > versions > 2 > status | affected |
| containers > | cna > affected > 0 > versions > 3 > versionType | semver |
| containers > | cna > affected > 0 > versions > 3 > version | 7.0.0 |
| containers > | cna > affected > 0 > versions > 3 > lessThanOrEqual | 7.0.19 |
| containers > | cna > affected > 0 > versions > 3 > status | affected |
| containers > | cna > affected > 0 > versions > 4 > versionType | semver |
| containers > | cna > affected > 0 > versions > 4 > version | 6.4.0 |
| containers > | cna > affected > 0 > versions > 4 > lessThanOrEqual | 6.4.16 |
| containers > | cna > affected > 0 > versions > 4 > status | affected |
| containers > | cna > affected > 1 > vendor | Fortinet |
| containers > | cna > affected > 1 > product | FortiProxy |
| containers > | cna > affected > 1 > cpes > 0 | cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 1 | cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 2 | cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 3 | cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 4 | cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 5 | cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 6 | cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 7 | cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 8 | cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 9 | cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 10 | cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 11 | cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 12 | cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 13 | cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 14 | cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 15 | cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 16 | cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 17 | cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 18 | cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 19 | cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 20 | cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 21 | cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 22 | cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 23 | cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 24 | cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 25 | cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 26 | cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 27 | cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 28 | cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 29 | cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 30 | cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 31 | cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 32 | cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 33 | cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 34 | cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 35 | cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 36 | cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 37 | cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 38 | cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 39 | cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 40 | cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 41 | cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 42 | cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 43 | cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 44 | cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 45 | cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 46 | cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 47 | cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 48 | cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 49 | cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 50 | cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 51 | cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 52 | cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 53 | cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 54 | cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 55 | cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 56 | cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > cpes > 57 | cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 1 > defaultStatus | unaffected |
| containers > | cna > affected > 1 > versions > 0 > versionType | semver |
| containers > | cna > affected > 1 > versions > 0 > version | 7.6.0 |
| containers > | cna > affected > 1 > versions > 0 > lessThanOrEqual | 7.6.4 |
| containers > | cna > affected > 1 > versions > 0 > status | affected |
| containers > | cna > affected > 1 > versions > 1 > versionType | semver |
| containers > | cna > affected > 1 > versions > 1 > version | 7.4.0 |
| containers > | cna > affected > 1 > versions > 1 > lessThanOrEqual | 7.4.11 |
| containers > | cna > affected > 1 > versions > 1 > status | affected |
| containers > | cna > affected > 1 > versions > 2 > versionType | semver |
| containers > | cna > affected > 1 > versions > 2 > version | 7.2.0 |
| containers > | cna > affected > 1 > versions > 2 > lessThanOrEqual | 7.2.16 |
| containers > | cna > affected > 1 > versions > 2 > status | affected |
| containers > | cna > affected > 1 > versions > 3 > versionType | semver |
| containers > | cna > affected > 1 > versions > 3 > version | 7.0.0 |
| containers > | cna > affected > 1 > versions > 3 > lessThanOrEqual | 7.0.23 |
| containers > | cna > affected > 1 > versions > 3 > status | affected |
| containers > | cna > affected > 2 > vendor | Fortinet |
| containers > | cna > affected > 2 > product | FortiSwitchManager |
| containers > | cna > affected > 2 > cpes > 0 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.7:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 1 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 2 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 3 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 4 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 5 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 6 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 7 | cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 8 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.6:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 9 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.5:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 10 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.4:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 11 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 12 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 13 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > cpes > 14 | cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 2 > defaultStatus | unaffected |
| containers > | cna > affected > 2 > versions > 0 > versionType | semver |
| containers > | cna > affected > 2 > versions > 0 > version | 7.2.0 |
| containers > | cna > affected > 2 > versions > 0 > lessThanOrEqual | 7.2.7 |
| containers > | cna > affected > 2 > versions > 0 > status | affected |
| containers > | cna > affected > 2 > versions > 1 > versionType | semver |
| containers > | cna > affected > 2 > versions > 1 > version | 7.0.0 |
| containers > | cna > affected > 2 > versions > 1 > lessThanOrEqual | 7.0.6 |
| containers > | cna > affected > 2 > versions > 1 > status | affected |
| containers > | cna > affected > 3 > vendor | Fortinet |
| containers > | cna > affected > 3 > product | FortiPAM |
| containers > | cna > affected > 3 > cpes > 0 | cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 1 | cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 2 | cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 3 | cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 4 | cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 5 | cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 6 | cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 7 | cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 8 | cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 9 | cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 10 | cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 11 | cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 12 | cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 13 | cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 14 | cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 15 | cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 16 | cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 17 | cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 18 | cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > cpes > 19 | cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:* |
| containers > | cna > affected > 3 > defaultStatus | unaffected |
| containers > | cna > affected > 3 > versions > 0 > version | 1.7.0 |
| containers > | cna > affected > 3 > versions > 0 > status | affected |
| containers > | cna > affected > 3 > versions > 1 > versionType | semver |
| containers > | cna > affected > 3 > versions > 1 > version | 1.6.0 |
| containers > | cna > affected > 3 > versions > 1 > lessThanOrEqual | 1.6.2 |
| containers > | cna > affected > 3 > versions > 1 > status | affected |
| containers > | cna > affected > 3 > versions > 2 > versionType | semver |
| containers > | cna > affected > 3 > versions > 2 > version | 1.5.0 |
| containers > | cna > affected > 3 > versions > 2 > lessThanOrEqual | 1.5.1 |
| containers > | cna > affected > 3 > versions > 2 > status | affected |
| containers > | cna > affected > 3 > versions > 3 > versionType | semver |
| containers > | cna > affected > 3 > versions > 3 > version | 1.4.0 |
| containers > | cna > affected > 3 > versions > 3 > lessThanOrEqual | 1.4.3 |
| containers > | cna > affected > 3 > versions > 3 > status | affected |
| containers > | cna > affected > 3 > versions > 4 > versionType | semver |
| containers > | cna > affected > 3 > versions > 4 > version | 1.3.0 |
| containers > | cna > affected > 3 > versions > 4 > lessThanOrEqual | 1.3.1 |
| containers > | cna > affected > 3 > versions > 4 > status | affected |
| containers > | cna > affected > 3 > versions > 5 > version | 1.2.0 |
| containers > | cna > affected > 3 > versions > 5 > status | affected |
| containers > | cna > affected > 3 > versions > 6 > versionType | semver |
| containers > | cna > affected > 3 > versions > 6 > version | 1.1.0 |
| containers > | cna > affected > 3 > versions > 6 > lessThanOrEqual | 1.1.2 |
| containers > | cna > affected > 3 > versions > 6 > status | affected |
| containers > | cna > affected > 3 > versions > 7 > versionType | semver |
| containers > | cna > affected > 3 > versions > 7 > version | 1.0.0 |
| containers > | cna > affected > 3 > versions > 7 > lessThanOrEqual | 1.0.3 |
| containers > | cna > affected > 3 > versions > 7 > status | affected |
| containers > | cna > descriptions > 0 > lang | en |
| containers > | cna > descriptions > 0 > value | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. |
| containers > | cna > providerMetadata > orgId | 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 |
| containers > | cna > providerMetadata > shortName | fortinet |
| containers > | cna > providerMetadata > dateUpdated | 2026-04-14T15:39:51.445Z |
| containers > | cna > problemTypes > 0 > descriptions > 0 > lang | en |
| containers > | cna > problemTypes > 0 > descriptions > 0 > cweId | CWE-22 |
| containers > | cna > problemTypes > 0 > descriptions > 0 > description | Escalation of privilege |
| containers > | cna > problemTypes > 0 > descriptions > 0 > type | CWE |
| containers > | cna > metrics > 0 > format | CVSS |
| containers > | cna > metrics > 0 > cvssV3_1 > version | 3.1 |
| containers > | cna > metrics > 0 > cvssV3_1 > attackComplexity | LOW |
| containers > | cna > metrics > 0 > cvssV3_1 > attackVector | LOCAL |
| containers > | cna > metrics > 0 > cvssV3_1 > availabilityImpact | HIGH |
| containers > | cna > metrics > 0 > cvssV3_1 > baseScore | 5.4 |
| containers > | cna > metrics > 0 > cvssV3_1 > baseSeverity | MEDIUM |
| containers > | cna > metrics > 0 > cvssV3_1 > confidentialityImpact | NONE |
| containers > | cna > metrics > 0 > cvssV3_1 > integrityImpact | HIGH |
| containers > | cna > metrics > 0 > cvssV3_1 > privilegesRequired | HIGH |
| containers > | cna > metrics > 0 > cvssV3_1 > scope | UNCHANGED |
| containers > | cna > metrics > 0 > cvssV3_1 > userInteraction | NONE |
| containers > | cna > metrics > 0 > cvssV3_1 > vectorString | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C |
| containers > | cna > solutions > 0 > lang | en |
| containers > | cna > solutions > 0 > value | Upgrade to upcoming FortiOS version 8.0.0 or above Upgrade to FortiOS version 7.6.5 or above Upgrade to FortiOS version 7.4.10 or above Upgrade to FortiProxy version 7.6.5 or above Upgrade to FortiProxy version 7.4.12 or above Upgrade to FortiPAM version 1.8.0 or above Upgrade to FortiPAM version 1.7.1 or above Fortinet remediated this issue in FortiSASE version 25.4.b and hence customers do not need to perform any action. Upgrade to upcoming FortiSwitch version 8.0.0 or above Upgrade to FortiSwitch version 7.6.5 or above Upgrade to FortiSwitch version 7.4.9 or above Upgrade to FortiSwitchManager version 7.2.8 or above Upgrade to FortiSwitchManager version 7.0.7 or above |
| containers > | cna > references > 0 > name | https://fortiguard.fortinet.com/psirt/FG-IR-26-122 |
| containers > | cna > references > 0 > url | https://fortiguard.fortinet.com/psirt/FG-IR-26-122 |
| containers > | adp > 0 > metrics > 0 > other > type | ssvc |
| containers > | adp > 0 > metrics > 0 > other > content > id | CVE-2025-61624 |
| containers > | adp > 0 > metrics > 0 > other > content > role | CISA Coordinator |
| containers > | adp > 0 > metrics > 0 > other > content > options > 0 > Exploitation | active |
| containers > | adp > 0 > metrics > 0 > other > content > options > 1 > Automatable | no |
| containers > | adp > 0 > metrics > 0 > other > content > options > 2 > Technical Impact | total |
| containers > | adp > 0 > metrics > 0 > other > content > version | 2.0.3 |
| containers > | adp > 0 > metrics > 0 > other > content > timestamp | 2026-10-16T17:50:10.589935Z |
| containers > | adp > 0 > references > 0 > url | https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 |
| containers > | adp > 0 > references > 0 > tags > 0 | third-party-advisory |
| containers > | adp > 0 > references > 1 > url | https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 |
| containers > | adp > 0 > references > 1 > tags > 0 | government-resource |
| containers > | adp > 0 > title | CISA ADP Vulnrichment |
| containers > | adp > 0 > providerMetadata > orgId | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
| containers > | adp > 0 > providerMetadata > shortName | CISA-ADP |
| containers > | adp > 0 > providerMetadata > dateUpdated | 2026-10-16T17:54:22.867Z |
| containers > | adp > 1 > x_adpType | supplier |
| containers > | adp > 1 > providerMetadata > orgId | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e |
| containers > | adp > 1 > providerMetadata > shortName | siemens-SADP |
| containers > | adp > 1 > providerMetadata > dateUpdated | 2026-05-12T12:08:31.410Z |
| containers > | adp > 1 > affected > 0 > vendor | Siemens |
| containers > | adp > 1 > affected > 0 > product | RUGGEDCOM APE1808 |
| containers > | adp > 1 > affected > 0 > versions > 0 > status | affected |
| containers > | adp > 1 > affected > 0 > versions > 0 > version | 0 |
| containers > | adp > 1 > affected > 0 > versions > 0 > lessThan | * |
| containers > | adp > 1 > affected > 0 > versions > 0 > versionType | custom |
| containers > | adp > 1 > affected > 0 > defaultStatus | unknown |
| containers > | adp > 1 > references > 0 > url | https://cert-portal.siemens.com/productcert/html/ssa-975644.html |