Vulnerability in Fortinet Fortianalyzer
CVE-2025-68482
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager…
Vulnerability class: Improper Certificate Validation
EPSS: 0.000 (6.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N/E:P/RL:W/RC:C.
Affected products
- Fortinet Fortianalyzer — versions 7.6.0, 7.4.0, 7.2.0
- Fortinet Fortianalyzer Cloud — versions 7.6.2, 7.4.1, 7.2.1
- Fortinet Fortimanager — versions 7.6.0, 7.4.0, 7.2.0
- Fortinet Fortimanager Cloud — versions 7.6.2, 7.4.1, 7.2.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-68482?
- CVE-2025-68482 is a medium-severity vulnerability in Fortinet Fortianalyzer, classified under Improper Certificate Validation. CVSS score: 6.3/10. Published 2026-03-10.
- How severe is CVE-2025-68482?
- Medium severity. CVSS v3 base score is 6.3 out of 10.