What is CVE-2025-22251?

CVE-2025-22251 is a low-severity vulnerability in Fortinet Fortios, classified under CWE-923. CVSS score: 3.1/10. Published 2025-06-10.

How severe is CVE-2025-22251?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Fortinet Fortios

CVE-2025-22251

An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unau…

EPSS: 0.003 (25.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Fortinet Fortios — versions 7.6.0, 7.4.0, 7.2.0

Weakness classification (CWE)

CWE-923

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-22251?: CVE-2025-22251 is a low-severity vulnerability in Fortinet Fortios, classified under CWE-923. CVSS score: 3.1/10. Published 2025-06-10.
How severe is CVE-2025-22251?: Low severity. CVSS v3 base score is 3.1 out of 10.