Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-22256

A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests

Published

2025-06-10T17:21:08.703

Last Modified

2025-07-24T19:58:09.450

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-280
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System fortinet fortipam < 1.0.4 Yes
Operating System fortinet fortipam < 1.1.3 Yes
Operating System fortinet fortipam < 1.4.2 Yes
Operating System fortinet fortipam 1.2.0 Yes
Operating System fortinet fortipam 1.3.0 Yes
Application fortinet fortisra < 1.4.2 Yes
References