CVE-2025-25253
Modified Modified - Updated After Analysis
BaseFortify

Publication date: 2025-10-14

Last updated on: 2026-06-09

Assigner: Fortinet, Inc.

Description
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-14
Last Modified
2026-06-09
Generated
2026-06-16
AI Q&A
2025-10-14
EPSS Evaluated
2026-06-15
NVD
CVE-2025-25253
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
fortinet fortiproxy From 7.6.0 (inc) to 7.6.4 (inc)
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
fortinet fortiproxy From 7.6.0 (inc) to 7.6.4 (inc)
fortinet fortios From 7.4.0 (inc) to 7.4.9 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-297 The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Validation of Certificate with Host Mismatch (CWE-297) in FortiProxy and FortiOS ZTNA proxy versions specified. It allows an unauthenticated attacker positioned as a man-in-the-middle to intercept and tamper with connections to the ZTNA proxy by exploiting the failure to properly validate certificates against the host.

Impact Analysis

The vulnerability can allow an unauthenticated attacker to intercept and modify communications between a client and the ZTNA proxy, potentially leading to data theft, manipulation, or disruption of services. This can compromise confidentiality, integrity, and availability of the affected systems.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-25253. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart