rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-64115 Movary unvalidated Referer header allows open redirect and phishing
Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and facilitate phishing. This vulnerability is fixed in 0.69.0.
Problem types: cwe_id: CWE-601
description: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: leepeuker
product: movary
Published: 2025-10-30T17:39:19.330Z
CVE-2025-64116 Movary vulnerable to an open redirect
Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vulnerability is fixed in 0.69.0.
Problem types: cwe_id: CWE-601
description: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: leepeuker
product: movary
Published: 2025-10-30T17:32:41.434Z
CVE-2025-64117 Tuleap missing CSRF protection in the management of SVN commit rules and immutable tags
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1761813675 and Tuleap Enterprise Edition prior to versions 16.13-5 and 16.12-8 don't have cross-site request forgery protection in the management of SVN commit rules and immutable tags. An attacker could use this vulnerability to trick victims into changing the commit rules or immutable tags of a SVN repo. Tuleap Community Edition 16.13.99.1761813675, Tuleap Enterprise Edition 16.13-5, and Tuleap Enterprise Edition 16.12-8 contain a fix for the issue.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Enalean
product: tuleap
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Published: 2025-11-12T19:12:42.405Z
CVE-2025-64118 node-tar vulnerable to race condition leading to uninitialized memory exposure
node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
cwe_id: CWE-367
description: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: isaacs
product: node-tar
Published: 2025-10-30T17:50:20.421Z
CVE-2025-64119 Nuvation Energy BMS Client-side Authentication
A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.
Problem types: cwe_id: CWE-603
description: CWE-603
Affected products: vendor: Nuvation Energy
product: Battery Management System
default_status: affected
Credits: lang: en
value: Reid Wightman, Dragos Inc
Published: 2026-01-02T21:26:57.225Z
CVE-2025-64120 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Nuvation Energy
product: Multi-Stack Controller (MSC)
default_status: unaffected
Published: 2026-01-02T21:33:23.491Z
CVE-2025-64121 Nuvation Energy Multi-Stack Controller Authentication Bypass
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Nuvation Energy
product: Multi-Stack Controller (MSC)
default_status: unaffected
Published: 2026-01-02T21:35:53.593Z
CVE-2025-64122 Nuvation Energy Multi-Stack Controller Private Key Stored on Device
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Nuvation Energy
product: Multi-Stack Controller (MSC)
default_status: unaffected
Published: 2026-01-02T21:39:26.621Z
CVE-2025-64123 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.
Problem types: cwe_id: CWE-441
description: CWE-441: Unintended Proxy or Intermediary
Affected products: vendor: Nuvation Energy
product: Multi-Stack Controller (MSC)
default_status: unaffected
Published: 2026-01-02T21:41:25.568Z
CVE-2025-64124 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Nuvation Energy
product: Multi-Stack Controller (MSC)
default_status: unaffected
Published: 2026-01-03T00:28:24.506Z
CVE-2025-64125 Nuvation Energy nCloud Client-to-Client Communication
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.
Problem types: cwe_id: CWE-441
description: CWE-441: Unintended Proxy or Intermediary
Affected products: vendor: Nuvation Energy
product: nCloud VPN Service
default_status: unaffected
Published: 2026-01-03T00:21:20.052Z
CVE-2025-64126 Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to improper input 
validation. The application accepts a parameter directly from user input
 without verifying it is a valid IP address or filtering potentially 
malicious characters. This could allow an unauthenticated attacker to 
inject arbitrary commands.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Zenitel
product: TCIV-3+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Nir Tepper and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.
Published: 2025-11-26T17:47:05.385Z
CVE-2025-64127 Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to insufficient 
sanitization of user-supplied input. The application accepts parameters 
that are later incorporated into OS commands without adequate 
validation. This could allow an unauthenticated attacker to execute 
arbitrary commands remotely.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Zenitel
product: TCIV-3+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Nir Tepper and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.
Published: 2025-11-26T17:50:01.184Z
CVE-2025-64128 Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to incomplete 
validation of user-supplied input. Validation fails to enforce 
sufficient formatting rules, which could permit attackers to append 
arbitrary data. This could allow an unauthenticated attacker to inject 
arbitrary commands.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: Zenitel
product: TCIV-3+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Nir Tepper and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.
Published: 2025-11-26T17:51:23.485Z
CVE-2025-64129 Zenitel TCIV-3+ Out-of-bounds Write
Zenitel TCIV-3+ is vulnerable to an out-of-bounds write 
vulnerability, which could allow a remote attacker to crash the device.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: Zenitel
product: TCIV-3+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.1
Credits: lang: en
value: Nir Tepper and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.
Published: 2025-11-26T17:54:07.700Z
CVE-2025-64130 Zenitel TCIV-3+ Cross-site Scripting
Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting 
vulnerability, which could allow a remote attacker to execute arbitrary 
JavaScript on the victim's browser.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Zenitel
product: TCIV-3+
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Nir Tepper and Noam Moshe of Claroty Team82 reported these vulnerabilities to CISA.
Published: 2025-11-26T17:55:56.856Z
CVE-2025-64131 
Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.
Affected products: vendor: Jenkins Project
product: Jenkins SAML Plugin
default_status: unaffected
Published: 2025-10-29T13:29:39.724Z
CVE-2025-64132 
Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.
Affected products: vendor: Jenkins Project
product: Jenkins MCP Server Plugin
default_status: unaffected
Published: 2025-10-29T13:29:40.401Z
CVE-2025-64133 
A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code.
Affected products: vendor: Jenkins Project
product: Jenkins Extensible Choice Parameter Plugin
default_status: unknown
Published: 2025-10-29T13:29:41.045Z
CVE-2025-64134 
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: vendor: Jenkins Project
product: Jenkins JDepend Plugin
default_status: unknown
Published: 2025-10-29T13:29:41.699Z
CVE-2025-64135 
Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, disabling a protection mechanism of the Java runtime.
Affected products: vendor: Jenkins Project
product: Jenkins Eggplant Runner Plugin
default_status: unknown
Published: 2025-10-29T13:29:42.358Z
CVE-2025-64136 
A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server.
Affected products: vendor: Jenkins Project
product: Jenkins Themis Plugin
default_status: unknown
Published: 2025-10-29T13:29:42.998Z
CVE-2025-64137 
A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.
Affected products: vendor: Jenkins Project
product: Jenkins Themis Plugin
default_status: unknown
Published: 2025-10-29T13:29:43.669Z
CVE-2025-64138 
A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.
Affected products: vendor: Jenkins Project
product: Jenkins Start Windocks Containers Plugin
default_status: unknown
Published: 2025-10-29T13:29:44.349Z
CVE-2025-64139 
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Affected products: vendor: Jenkins Project
product: Jenkins Start Windocks Containers Plugin
default_status: unknown
Published: 2025-10-29T13:29:45.114Z
CVE-2025-64140 
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.
Affected products: vendor: Jenkins Project
product: Jenkins Azure CLI Plugin
default_status: unknown
Published: 2025-10-29T13:29:45.804Z
CVE-2025-64141 
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins Project
product: Jenkins Nexus Task Runner Plugin
default_status: unknown
Published: 2025-10-29T13:29:46.447Z
CVE-2025-64142 
A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected products: vendor: Jenkins Project
product: Jenkins Nexus Task Runner Plugin
default_status: unknown
Published: 2025-10-29T13:29:47.116Z
CVE-2025-64143 
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
Affected products: vendor: Jenkins Project
product: Jenkins OpenShift Pipeline Plugin
default_status: unknown
Published: 2025-10-29T13:29:47.762Z
CVE-2025-64144 
Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
Affected products: vendor: Jenkins Project
product: Jenkins ByteGuard Build Actions Plugin
default_status: unknown
Published: 2025-10-29T13:29:48.402Z
CVE-2025-64145 
Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected products: vendor: Jenkins Project
product: Jenkins ByteGuard Build Actions Plugin
default_status: unknown
Published: 2025-10-29T13:29:49.056Z
CVE-2025-64146 
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
Affected products: vendor: Jenkins Project
product: Jenkins Curseforge Publisher Plugin
default_status: unknown
Published: 2025-10-29T13:29:49.711Z
CVE-2025-64147 
Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected products: vendor: Jenkins Project
product: Jenkins Curseforge Publisher Plugin
default_status: unknown
Published: 2025-10-29T13:29:50.359Z
CVE-2025-64148 
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products: vendor: Jenkins Project
product: Jenkins Publish to Bitbucket Plugin
default_status: unknown
Published: 2025-10-29T13:29:51.005Z
CVE-2025-64149 
A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins Project
product: Jenkins Publish to Bitbucket Plugin
default_status: unknown
Published: 2025-10-29T13:29:51.666Z
CVE-2025-64150 
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected products: vendor: Jenkins Project
product: Jenkins Publish to Bitbucket Plugin
default_status: unknown
Published: 2025-10-29T13:29:52.313Z
CVE-2025-64151 
Multiple Roboticsware products provided by Roboticsware PTE. LTD. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Problem types: cwe_id: CWE-428
description: Unquoted search path or element
Affected products: vendor: Roboticsware PTE. LTD.
product: FA-Panel6
vendor: Roboticsware PTE. LTD.
product: BA-Panel6
vendor: Roboticsware PTE. LTD.
product: PA-Panel6
vendor: Roboticsware PTE. LTD.
product: FA-Server6
Published: 2025-11-05T06:19:25.053Z
CVE-2025-64153 
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiExtender
cpes: cpe:2.3:a:fortinet:fortiextender:7.6.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.6.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.6.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.6.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiextender:7.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Published: 2025-12-09T17:18:45.909Z
CVE-2025-64155 
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via  crafted TCP requests.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiSIEM
cpes: cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.4
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
Published: 2026-01-13T16:32:28.665Z
CVE-2025-64156 
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests
Problem types: cwe_id: CWE-89
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiVoice
cpes: cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
Published: 2025-12-09T17:18:45.540Z