What is CVE-2025-32932?

CVE-2025-32932 is a medium-severity vulnerability in Fortinet Fortisoar, classified under Cross-site Scripting. CVSS score: 6.2/10. Published 2025-08-12.

How severe is CVE-2025-32932?

Medium severity. CVSS v3 base score is 6.2 out of 10.

XSS in Fortinet Fortisoar

CVE-2025-32932

An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all ver…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (17.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:U/RC:C.

Affected products

Fortinet Fortisoar — versions 7.6.0, 7.5.0, 7.4.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-513

Frequently asked questions

What is CVE-2025-32932?: CVE-2025-32932 is a medium-severity vulnerability in Fortinet Fortisoar, classified under Cross-site Scripting. CVSS score: 6.2/10. Published 2025-08-12.
How severe is CVE-2025-32932?: Medium severity. CVSS v3 base score is 6.2 out of 10.