6.3
Medium
CVE-2025-48839 An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all…
Description
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiADC | 8.0.0 | No fix stated |
| FortiADC 7.6 | 7.6.0 → 7.6.2 | No fix stated |
| FortiADC 7.4 | 7.4.0 → 7.4.7 | No fix stated |
| FortiADC 7.2 | 7.2.0 → 7.2.8 | No fix stated |
| FortiADC 7.1 | 7.1.0 → 7.1.5 | No fix stated |
| FortiADC 7.0 | 7.0.0 → 7.0.6 | No fix stated |
| FortiADC 6.2 | 6.2.0 → 6.2.6 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiADC
The 33 CVEs of FortiADC →
CVE-2025-58412
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC…
4.2
Medium
CVE-2025-54971
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all…
3.9
Low
CVE-2025-59921
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version…
6.2
Medium
CVE-2025-49813
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78]…
6.6
Medium