← Database

CVE-2025-22256

MEDIUM CVSS: 6.3 Published: 2025-06-10 Modified: 2026-06-17

Description

A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests

Affected Platforms

Fortinet FortisraFortinet Fortipam

Weakness Type

CWE-280

References