CVE-2025-59921
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all ve
Severity
Medium 6.2
CVSS 3.1
Exploited
Not listed
EPSS
0.003
23.2th percentile
Discovered by
Vendor
Vendor advisory acknowledgement
Published
Oct 14, 2025
Assigned by fortinet
Description
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests.
Weakness: CWE-200
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiADC | Web & Application Security | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiADC
Credit
Internally discovered and reported by Kushal Shah of Fortinet Vulnerability Research team.
Vendor remediation
Upgrade to FortiADC version 7.4.1 or above Upgrade to FortiADC version 7.2.4 or above Upgrade to FortiADC version 7.1.5 or above