CVE-2025-25257

Fortinet FortiWeb SQL Injection Vulnerability

Description

Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: Fortinet

Product: FortiWeb