CyberSec.Space Logo
CVEブラウザに戻る

CVE-2025-53845

MEDIUM
6.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-10-14
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests.

Affected Platforms (CPE)

📦
Fortinet

Fortianalyzer

>= 6.4.0 and < 7.4.7>= 7.6.0 and < 7.6.4

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-25-378

関連する脆弱性情報

CVE-2025-686487.2

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro...

CVE-2026-248589.8

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 ...

CVE-2024-405936.0

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnaly...

CVE-2025-549735.3

A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet ...