BaseFortify

Publication date: 2025-10-14

Last updated on: 2026-06-09

Assigner: Fortinet, Inc.

Description

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-14

Last Modified

2026-06-09

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-25253

Affected Vendors & Products

Vendor	Product	Version / Range
fortinet	fortiproxy	From 7.6.0 (inc) to 7.6.4 (inc)
fortinet	fortios	From 7.4.0 (inc) to 7.4.9 (inc)
fortinet	fortiproxy	From 7.6.0 (inc) to 7.6.4 (inc)
fortinet	fortios	From 7.4.0 (inc) to 7.4.9 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-297	The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Certificate with Host Mismatch (CWE-297) in FortiProxy and FortiOS ZTNA proxy versions specified. It allows an unauthenticated attacker positioned as a man-in-the-middle to intercept and tamper with connections to the ZTNA proxy by exploiting the failure to properly validate certificates against the host.

Impact Analysis

The vulnerability can allow an unauthenticated attacker to intercept and modify communications between a client and the ZTNA proxy, potentially leading to data theft, manipulation, or disruption of services. This can compromise confidentiality, integrity, and availability of the affected systems.

Hi! I’m here to help you understand CVE-2025-25253. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70