What is CVE-2025-61713?

CVE-2025-61713 is a medium-severity vulnerability in Fortinet Fortipam, classified under CWE-316. CVSS score: 4.2/10. Published 2025-11-18.

How severe is CVE-2025-61713?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Vulnerability in Fortinet Fortipam

CVE-2025-61713

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N.

Affected products

Fortinet Fortipam — versions 1.6.0, 1.5.0, 1.4.0

Weakness classification (CWE)

CWE-316

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-61713?: CVE-2025-61713 is a medium-severity vulnerability in Fortinet Fortipam, classified under CWE-316. CVSS score: 4.2/10. Published 2025-11-18.
How severe is CVE-2025-61713?: Medium severity. CVSS v3 base score is 4.2 out of 10.