deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-63883
Published: 2025-11-18
Description: A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/E-commerce). The site's client-side JavaScript reads attacker-controlled input (for example, values derived from the URL or page fragment) and inserts it into the DOM via unsafe sinks (innerHTML/insertAdjacentHTML/document.write) without proper sanitization or context-aware encoding. An attacker can craft a malicious URL that, when opened by a victim, causes arbitrary JavaScript to execute in the victim's browser under the electic-shop origin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-63883.md
CVE: CVE-2025-63892
Published: 2025-11-18
Description: A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://sourcecodester.com; http://student.com; https://github.com/minhajultaivin/security-advisories/blob/main/CVE-2025-63892.md
CVE: CVE-2025-8084
Published: 2025-11-18
Description: The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.8 via the rest_helpers_create_images function. This makes it possible for authenticated attackers, with Editor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On Cloud instances, this issue allows for metadata retrieving.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/rest.php#L742; https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/services/image.php#L89; https://www.wordfence.com/threat-intel/vulnerabilities/id/3b497bc0-bf47-43c7-9d5f-8e130dd0bab2?source=cve
CVE: CVE-2025-9312
Published: 2025-11-18
Description: A missing authentication enforcement vulnerability exists in the mutual TLS (mTLS) implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components may permit unauthenticated requests even when mTLS is enabled. This condition occurs when relying on the default mTLS settings for System REST APIs or when the mTLS authenticator is enabled for SOAP services, causing these interfaces to accept requests without enforcing additional authentication.

Successful exploitation allows a malicious actor with network access to the affected endpoints to gain administrative privileges and perform unauthorized operations. The vulnerability is exploitable only when the impacted mTLS flows are enabled and accessible in a given deployment. Other certificate-based authentication mechanisms such as Mutual TLS OAuth client authentication and X.509 login flows are not affected, and APIs served through the API Gateway of WSO2 API Manager remain unaffected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4494/
CVE: CVE-2025-12383
Published: 2025-11-18
Description: In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain conditions, it could lead to unauthorized trust in insecure servers (see PoC)
CVSS Score: 7.4 (HIGH)
CWE: CWE-362
References: https://gitlab.eclipse.org/security/cve-assignment/-/issues/74
CVE: CVE-2025-55074
Published: 2025-11-18
Description: Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects
CVSS Score: 3.0 (LOW)
References: https://mattermost.com/security-updates
CVE: CVE-2025-58121
Published: 2025-11-18
Description: Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-280
References: https://checkmk.com/werk/18983
CVE: CVE-2025-58122
Published: 2025-11-18
Description: Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-280
References: https://checkmk.com/werk/18982
CVE: CVE-2025-63408
Published: 2025-11-18
Description: Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-78, CWE-918
References: https://ispysoftware.github.io/Agent_API/; https://www.ericholub.com/blog/agent-dvr-rce/
CVE: CVE-2025-63602
Published: 2025-11-18
Description: A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 (1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys) that lacks a properly secured DACL, allowing unprivileged users to interact with the driver and, as a result, the kernel. This can result in local privilege escalation, information disclosure, denial of service, and other unspecified impacts.
CVSS Score: 7.3 (HIGH)
CWE: CWE-126
References: https://dreadsec.co/p/cve-2025-63602-hijacking-system-calls-with-a-popular-crypto-miner.html; https://www.awesomeminer.com/download
CVE: CVE-2025-63603
Published: 2025-11-18
Description: A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe_eval() function (src/mcp_server_ds/server.py:108). The function uses Python's exec() to execute user-supplied scripts but fails to restrict the __builtins__ dictionary in the globals parameter. When __builtins__ is not explicitly defined, Python automatically provides access to all built-in functions including __import__, exec, eval, and open. This allows an attacker to execute arbitrary Python code with full system privileges, leading to complete system compromise. The vulnerability can be exploited by submitting a malicious script to the run_script tool, requiring no authentication or special privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/reading-plus-ai/mcp-server-data-exploration/issues/12
CVE: CVE-2025-63604
Published: 2025-11-18
Description: A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the execute_query method. The vulnerability stems from the exposure of dangerous Python built-in functions (__import__, getattr, hasattr) in the execution namespace and the direct use of exec() to execute user-supplied code. An attacker can craft malicious queries to execute arbitrary Python code, leading to AWS credential theft (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY), file system access, environment variable disclosure, and potential system compromise. The vulnerability allows attackers to bypass intended security controls and gain unauthorized access to sensitive AWS resources and credentials stored in the server's environment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/baryhuang/mcp-server-aws-resources-python/issues/8
CVE: CVE-2025-63800
Published: 2025-11-18
Description: The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation. When an authenticated user omits or leaves the `password` and `repeat_password` parameters empty in the password change request, the backend still returns a successful response and sets the password to an empty string. This effectively disables authentication and may allow unauthorized access to user or administrative accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://github.com/omkaryepre/vulnerability-research/tree/main/CVE-2025-63800; https://github.com/opensourcepos/opensourcepos; https://opensourcepos.org/
CVE: CVE-2025-64996
Published: 2025-11-18
Description: In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-732
References: https://checkmk.com/werk/18570
CVE: CVE-2025-9977
Published: 2025-11-18
Description: Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not sanitized properly, which allows an unauthenticated attacker to perform DoS attacks. SQL injection attacks might also be feasible, although so far creating a working exploit has been prevented probably by backend filtering mechanisms.
Additionally, command injection attempts cause the application to return extensive error messages disclosing some information about the internal infrastructure. 
Patching status is unknown because the vendor has not replied to messages sent by the CNA.
CWE: CWE-89, CWE-209
References: https://cert.pl/en/posts/2025/11/CVE-2025-9977; https://www.timesoftsg.com.sg/payroll-software/
CVE: CVE-2025-12760
Published: 2025-11-18
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-288
References: https://www.drupal.org/sa-contrib-2025-115
CVE: CVE-2025-12761
Published: 2025-11-18
Description: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-116
CVE: CVE-2025-13080
Published: 2025-11-18
Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754
References: https://www.drupal.org/sa-core-2025-005
CVE: CVE-2025-13081
Published: 2025-11-18
Description: Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-915, CWE-502
References: https://www.drupal.org/sa-core-2025-006
CVE: CVE-2025-13082
Published: 2025-11-18
Description: User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-451
References: https://www.drupal.org/sa-core-2025-007
CVE: CVE-2025-13083
Published: 2025-11-18
Description: Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8, from 7.0 before 7.103.
CVSS Score: 3.7 (LOW)
CWE: CWE-525
References: https://www.drupal.org/sa-core-2025-008
CVE: CVE-2025-33183
Published: 2025-11-18
Description: NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33183; https://nvidia.custhelp.com/app/answers/detail/a_id/5725; https://www.cve.org/CVERecord?id=CVE-2025-33183
CVE: CVE-2025-33184
Published: 2025-11-18
Description: NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33184; https://nvidia.custhelp.com/app/answers/detail/a_id/5725; https://www.cve.org/CVERecord?id=CVE-2025-33184
CVE: CVE-2025-34324
Published: 2025-11-18
Description: GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate validation can be disabled when a proxy is configured, allowing an attacker who can intercept network traffic to supply a malicious update manifest and corresponding package with a matching hash. This can cause the client to download and install a tampered update, resulting in arbitrary code execution with the privileges of the GoSign Desktop user on Windows and macOS, or with elevated privileges on some Linux deployments. A local attacker who can modify proxy settings may also abuse this behavior to escalate privileges by forcing installation of a crafted update.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://infocert.digital/consumer/gosign-suite/; https://www.ush.it/2025/11/14/multiple-vulnerabilities-gosign-desktop-remote-code-execution/; https://www.ush.it/2025/11/14/vulnerabilita-multiple-gosign-desktop-esecuzione-remota-codice-arbitrario/
CVE: CVE-2025-46215
Published: 2025-11-18
Description: An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-653
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-501
CVE: CVE-2025-46373
Published: 2025-11-18
Description: A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys". The attacker would need to bypass the  Windows heap integrity protections
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-125
CVE: CVE-2025-46775
Published: 2025-11-18
Description: A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1295
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-259
CVE: CVE-2025-46776
Published: 2025-11-18
Description: A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-120
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-251
CVE: CVE-2025-47761
Published: 2025-11-18
Description: An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver.  Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-782
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-112
CVE: CVE-2025-48839
Published: 2025-11-18
Description: An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-225
CVE: CVE-2025-53360
Published: 2025-11-18
Description: pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/pluginsGLPI/databaseinventory/commit/0a376a0c6f4142e11ea518faefe95c01b176fd87; https://github.com/pluginsGLPI/databaseinventory/commit/7dcad1efb6ee84e9cffb3b446cdb47dc0be1091e; https://github.com/pluginsGLPI/databaseinventory/commit/e9d4474acdab4141a6f4798cdd406b0d04480269
CVE: CVE-2025-53843
Published: 2025-11-18
Description: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-358
CVE: CVE-2025-54660
Published: 2025-11-18
Description: An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-489
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-844
CVE: CVE-2025-54821
Published: 2025-11-18
Description: An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command.
CVSS Score: 1.9 (LOW)
CWE: CWE-269
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-545
CVE: CVE-2025-54971
Published: 2025-11-18
Description: An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission  to get the external resources password via the logs of the product
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-686
CVE: CVE-2025-54972
Published: 2025-11-18
Description: An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions, FortiMail 7.0 all versions may allow an attacker to inject headers in the response via convincing a user to click on a specifically crafted link
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-93
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-634
CVE: CVE-2025-55796
Published: 2025-11-18
Description: The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and email change confirmation. These tokens are generated by hashing the current timestamp formatted as "%d %H:%M:%S" without incorporating any user-specific data or cryptographic randomness. This predictability allows remote attackers to brute-force valid tokens within a small time window, enabling unauthorized account confirmation, password resets, and email change approvals, potentially leading to account takeover.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/openml; https://github.com/openml/openml.org; https://github.com/openml/openml.org/security/advisories/GHSA-xfjh-gf9p-8qr6
CVE: CVE-2025-56526
Published: 2025-11-18
Description: Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Cinnamon/kotaemon; https://github.com/Cinnamon/kotaemon/commit/37cdc28; https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure
CVE: CVE-2025-56527
Published: 2025-11-18
Description: Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-256
References: https://github.com/Cinnamon/kotaemon; https://github.com/Cinnamon/kotaemon/commit/37cdc28; https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure
CVE: CVE-2025-58034
Published: 2025-11-18
Description: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-513; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58034
CVE: CVE-2025-58413
Published: 2025-11-18
Description: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-632
CVE: CVE-2025-58692
Published: 2025-11-18
Description: An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-666