{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2025-25257",
  "revision": 1,
  "title": "Fortinet FortiWeb — Unauthenticated SQL Injection",
  "summary": "Fortinet FortiWeb does not sanitize part of the web requests it receives, so an attacker with no credentials can send crafted requests that inject SQL and execute unauthorized SQL code or commands on the device.",
  "source_type": "cve",
  "severity": "critical",
  "cvss": {
    "score": 9.8,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.99775,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": true,
    "attack_complexity": "low",
    "kev_added": "2025-07-18",
    "prerequisites": "Network access to a vulnerable FortiWeb device's web service"
  },
  "remediation": {
    "patch_available": true
  },
  "mitre_attack": [
    "T1190"
  ],
  "kill_chain": "initial_access",
  "recommended_action": "Upgrade FortiWeb per Fortinet's advisory FG-IR-25-151 now, and limit who can reach the device's web interfaces until you can.",
  "confidence": "high",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "references",
        "published_at"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2025-25257",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2025-25257",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2025-25257",
      "retrieved_at": "2026-09-21T07:05:11.841Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25257",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-151"
    },
    {
      "type": "exploit",
      "url": "https://packetstorm.news/files/id/210193/"
    },
    {
      "type": "exploit",
      "url": "https://www.exploit-db.com/exploits/52473"
    }
  ],
  "published_at": "2025-07-17T16:15:34.723Z",
  "issued_at": "2026-09-21T07:05:11.841Z",
  "tags": [
    "fortinet",
    "fortiweb",
    "network-appliance",
    "sql-injection"
  ]
}