Fortinet PSIRT Monthly Advisories — April 2025
Tuesday, 8 April 2025
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- Medium 5.6
All vulnerabilities 11
Critical1 ShowHide
High2 ShowHide
Medium5 ShowHide
-
Medium 6.8
CVE-2025-25254 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and…EPSS 17%
- Medium 6.7
- Medium 6.5
- Medium 5.6
- Medium 5.0
Low3 ShowHide
- Low 3.0
- Low 2.6
- Low 2.1