Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46730 State: PUBLISHED Published: 2025-05-05T19:32:24.170Z Last Updated: 2025-05-05T20:04:30.184Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: MobSF Products: Mobile-Security-Framework-MobSF Problem Types: CWE-409 Description: MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web applications. Access to the MobSF web interface is often granted to internal security teams, audit teams, and external vendors. MobSF provides a feature that allows users to upload ZIP files for static analysis. Upon upload, these ZIP files
ndors. MobSF provides a feature that allows users to upload ZIP files for static analysis. Upon upload, these ZIP files are automatically extracted and stored within the MobSF directory. However, in versions up to and including 4.3.2, this functionality lacks a check on the total uncompressed size of the ZIP file, making it vulnerable to a ZIP of Death (zip bomb) attack. Due to the absence of safeguards against oversized extractions, an attacker can craft a specially prepared ZIP file that is small in compressed form but expands to a massive size upon extraction. Exploiting this, an attacker can exhaust the server's disk space, leading to a complete denial of service (DoS) not just for MobSF
this, an attacker can exhaust the server's disk space, leading to a complete denial of service (DoS) not just for MobSF, but also for any other applications or websites hosted on the same server. This vulnerability can lead to complete server disruption in an organization which can affect other internal portals and tools too (which are hosted on the same server). If some organization has created their customized cloud based mobile security tool using MobSF core then an attacker can exploit this vulnerability to crash their servers. Commit 6987a946485a795f4fd38cebdb4860b368a1995d fixes this issue. As an additional mitigation, it is recommended to implement a safeguard that checks the total u
a1995d fixes this issue. As an additional mitigation, it is recommended to implement a safeguard that checks the total uncompressed size of any uploaded ZIP file before extraction. If the estimated uncompressed size exceeds a safe threshold (e.g., 100 MB), MobSF should reject the file and notify the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-c5vg-26p8-q8cr - https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/6987a946485a795f4fd38cebdb4860b368a1995d
CVE ID: CVE-2025-46731 State: PUBLISHED Published: 2025-05-05T19:35:31.347Z Last Updated: 2025-05-05T20:03:42.802Z Vendors: craftcms Products: cms Problem Types: CWE-1336 Description: Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-7c58-g782
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-7c58-g782-9j38 - https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv - https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production - http://github.com/craftcms/cms/pull/17026
CVE ID: CVE-2025-46732 State: PUBLISHED Published: 2025-07-18T15:05:11.435Z Last Updated: 2025-07-18T15:24:49.537Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: OpenCTI-Platform Products: opencti Problem Types: CWE-285 Description: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticated user to change the read status of a notification or delete a notification of another user in case he has knowledge of the UUID of
ange the read status of a notification or delete a notification of another user in case he has knowledge of the UUID of the notification. When changing the read status of a notification, the user also receives the content of the notification they changed the read status of. Authenticated Users in OpenCTI can read, modify and delete notification of other users if they know the UUID of the notification. Version 6.6.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-535g-qp2c-h7vp
CVE ID: CVE-2025-46733 State: PUBLISHED Published: 2025-07-04T13:13:53.815Z Last Updated: 2025-07-07T16:22:41.136Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: OP-TEE Products: optee_os Problem Types: CWE-755 Description: OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In version 4.5.0, using a specially crafted tee-supplicant binary running in REE userspace, an attacker can trigger a panic in a TA that uses the libutee Secure Storage API. Many functions in libutee, specifically those which make up the Secure Storage API, will panic if a system
Storage API. Many functions in libutee, specifically those which make up the Secure Storage API, will panic if a system call returns an unexpected return code. This behavior is mandated by the TEE Internal Core API specification. However, in OP-TEE’s implementation, return codes of secure storage operations are passed through unsanitized from the REE tee-supplicant, through the Linux kernel tee-driver, through the OP-TEE kernel, back to libutee. Thus, an attacker with access to REE userspace, and the ability to stop tee-supplicant and replace it with their own process (generally trivial for a root user, and depending on the way permissions are set up, potentially available even to less privi
rally trivial for a root user, and depending on the way permissions are set up, potentially available even to less privileged users) can run a malicious tee-supplicant process that responds to storage requests with unexpected response codes, triggering a panic in the requesting TA. This is particularly dangerous for TAs built with `TA_FLAG_SINGLE_INSTANCE` (corresponding to `gpd.ta.singleInstance` and `TA_FLAG_INSTANCE_KEEP_ALIVE` (corresponding to `gpd.ta.keepAlive`). The behavior of these TAs may depend on memory that is preserved between sessions, and the ability of an attacker to panic the TA and reload it with a clean memory space can compromise the behavior of those TAs. A critical exa
ttacker to panic the TA and reload it with a clean memory space can compromise the behavior of those TAs. A critical example of this is the optee_ftpm TA. It uses the kept alive memory to hold PCR values, which crucially must be non-resettable. An attacker who can trigger a panic in the fTPM TA can reset the PCRs, and then extend them PCRs with whatever they choose, falsifying boot measurements, accessing sealed data, and potentially more. The impact of this issue depends significantly on the behavior of affected TAs. For some, it could manifest as a denial of service, while for others, like the fTPM TA, it can result in the disclosure of sensitive data. Anyone running the fTPM TA is affecte
e for others, like the fTPM TA, it can result in the disclosure of sensitive data. Anyone running the fTPM TA is affected, but similar attacks may be possible on other TAs that leverage the Secure Storage API. A fix is available in commit 941a58d78c99c4754fbd4ec3079ec9e1d596af8f. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OP-TEE/optee_os/security/advisories/GHSA-f35r-hm2m-p6c3 - https://github.com/OP-TEE/optee_os/commit/941a58d78c99c4754fbd4ec3079ec9e1d596af8f
CVE ID: CVE-2025-46734 State: PUBLISHED Published: 2025-05-05T19:52:59.521Z Last Updated: 2025-05-06T13:47:03.821Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: thephpleague Products: commonmark Problem Types: CWE-79 Description: league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of the league/commonmark library (versions 1.5.0 through 2.6.x) allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configuration options such as `html_input: 'strip'` and `allow_unsafe_links: false` to mitigate cross-site scripting (XSS) attacks by stripping
ch as `html_input: 'strip'` and `allow_unsafe_links: false` to mitigate cross-site scripting (XSS) attacks by stripping raw HTML and disallowing unsafe links. However, when the Attributes Extension is enabled, it introduces a way for users to inject arbitrary HTML attributes into elements via Markdown syntax using curly braces. Version 2.7.0 contains three changes to prevent this XSS attack vector: All attributes starting with `on` are considered unsafe and blocked by default; support for an explicit allowlist of allowed HTML attributes; and manually-added `href` and `src` attributes now respect the existing `allow_unsafe_links` configuration option. If upgrading is not feasible, please cons
attributes now respect the existing `allow_unsafe_links` configuration option. If upgrading is not feasible, please consider disabling the `AttributesExtension` for untrusted users and/or filtering the rendered HTML through a library like HTMLPurifier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thephpleague/commonmark/security/advisories/GHSA-3527-qv2q-pfvx - https://github.com/thephpleague/commonmark/commit/f0d626cf05ad3e99e6db26ebcb9091b6cd1cd89b
CVE ID: CVE-2025-46735 State: PUBLISHED Published: 2025-05-06T17:00:33.902Z Last Updated: 2025-05-06T19:48:41.206Z Vendors: nrkno Products: terraform-provider-windns Problem Types: CWE-77 Description: Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nrkno/terraform-pro
x for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nrkno/terraform-provider-windns/security/advisories/GHSA-4vgf-2cm4-mp7c - https://github.com/nrkno/terraform-provider-windns/commit/c76f69610c1b502f90aaed8c4f102194530b5bce
CVE ID: CVE-2025-46736 State: PUBLISHED Published: 2025-05-06T17:08:23.503Z Last Updated: 2025-05-06T19:41:51.341Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: umbraco Products: Umbraco-CMS Problem Types: CWE-204 Description: Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GH
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-4g8m-5mj5-c8xg - https://github.com/umbraco/Umbraco-CMS/commit/14fbd20665b453cbf094ccf4575b79a9fba07e03 - https://github.com/umbraco/Umbraco-CMS/commit/34709be6cce9752dfa767dffbf551305f48839bc
CVE ID: CVE-2025-46737 State: PUBLISHED Published: 2025-05-12T16:06:23.559Z Last Updated: 2025-05-12T17:58:52.199Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-5037 Grid Configurator Problem Types: CWE-346 Description: SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46738 State: PUBLISHED Published: 2025-05-12T16:07:02.820Z Last Updated: 2025-05-12T17:57:51.802Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-5033 acSELerator RTAC Software Problem Types: CWE-502 Description: An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46739 State: PUBLISHED Published: 2025-05-12T16:08:38.763Z Last Updated: 2025-05-12T17:57:08.901Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-307 Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46740 State: PUBLISHED Published: 2025-05-12T16:09:22.036Z Last Updated: 2025-05-12T17:56:25.876Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-280 Description: An authenticated user without user administrative permissions could change the administrator Account Name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46741 State: PUBLISHED Published: 2025-05-12T16:09:53.581Z Last Updated: 2025-10-01T21:46:34.900Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-613 Description: A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46742 State: PUBLISHED Published: 2025-05-12T16:10:09.527Z Last Updated: 2025-10-01T22:23:33.103Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-521 Description: Users who were required to change their password could still access system information before changing their password Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46743 State: PUBLISHED Published: 2025-05-12T16:14:05.722Z Last Updated: 2025-05-12T17:29:34.022Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-352 Description: An authenticated user's token could be used by another source after the user had logged out prior to the token expiring. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46744 State: PUBLISHED Published: 2025-05-12T16:10:29.888Z Last Updated: 2025-10-01T22:24:21.101Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-863 Description: An authenticated administrator could modify the Created By username for a user account Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46745 State: PUBLISHED Published: 2025-05-12T16:11:08.840Z Last Updated: 2025-10-02T00:10:55.575Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-862 Description: An authenticated user without user-management permissions could view other users account information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46746 State: PUBLISHED Published: 2025-05-12T16:11:33.768Z Last Updated: 2025-05-12T17:50:17.015Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-209 Description: An administrator could discover another account's credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46747 State: PUBLISHED Published: 2025-05-12T16:11:52.359Z Last Updated: 2025-05-12T17:48:19.190Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-497 Description: An authenticated user without user-management permissions could identify other user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46748 State: PUBLISHED Published: 2025-05-12T16:12:07.018Z Last Updated: 2025-05-12T17:39:24.683Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-620 Description: An authenticated user attempting to change their password could do so without using the current password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46749 State: PUBLISHED Published: 2025-05-12T16:12:25.269Z Last Updated: 2025-05-12T17:38:23.392Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL Blueframe OS Problem Types: CWE-79 Description: An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46750 State: PUBLISHED Published: 2025-05-12T16:13:03.083Z Last Updated: 2025-05-12T17:30:32.158Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-3350-1, SEL-3355-2, SEL-3360-2 Problem Types: CWE-305 Description: SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://selinc.com/products/software/latest-software-versions/
CVE ID: CVE-2025-46752 State: PUBLISHED Published: 2025-10-16T14:00:30.930Z Last Updated: 2025-10-16T14:20:31.156Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiDLP Problem Types: CWE-532 Description: A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-160
CVE ID: CVE-2025-46753 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:09.525Z Description: No description available.
CVE ID: CVE-2025-46754 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:09.057Z Description: No description available.
CVE ID: CVE-2025-46755 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:08.596Z Description: No description available.
CVE ID: CVE-2025-46756 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:08.092Z Description: No description available.
CVE ID: CVE-2025-46757 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:07.506Z Description: No description available.
CVE ID: CVE-2025-46758 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:07.005Z Description: No description available.
CVE ID: CVE-2025-46759 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:06.473Z Description: No description available.
CVE ID: CVE-2025-46760 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:05.968Z Description: No description available.
CVE ID: CVE-2025-46761 State: REJECTED Published: N/A Last Updated: 2025-04-29T02:55:05.364Z Description: No description available.
CVE ID: CVE-2025-46762 State: PUBLISHED Published: 2025-05-06T09:08:13.996Z Last Updated: 2025-05-07T03:55:41.923Z Vendors: Apache Software Foundation Products: Apache Parquet Java Problem Types: CWE-73 Description: Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be executed. The exploit is only applicable if the client code of parquet-avro uses the "specific" or the "reflect" models deliberately for reading Parquet files. ("generic" model is not impacte
avro uses the "specific" or the "reflect" models deliberately for reading Parquet files. ("generic" model is not impacted) Users are recommended to upgrade to 1.15.2 or set the system property "org.apache.parquet.avro.SERIALIZABLE_PACKAGES" to an empty string on 1.15.1. Both are sufficient to fix the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/t7724lpvl110xsbgqwsmrdsns0rhycdp
CVE ID: CVE-2025-46774 State: PUBLISHED Published: 2025-10-14T15:23:47.725Z Last Updated: 2025-10-16T03:56:19.702Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiClientMac Problem Types: CWE-347 Description: An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-126
CVE ID: CVE-2025-46775 State: PUBLISHED Published: 2025-11-18T17:01:17.364Z Last Updated: 2025-11-18T18:33:37.068Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiExtender Problem Types: CWE-1295 Description: A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-259