Sploitus

5 exploited vulnerabilities in Fortiweb

Vulnerabilities with publicly known exploits

Vendors
Fortinet
With known exploits
5
Affected Fortinet Fortiweb versions
< 7.0.12, 7.2.12, 7.4.10, 7.6.5, 8.0.2, 7.0.11, 7.2.11, 7.4.8, 7.6.4, 6.1.4, 6.2.8, 6.3.23, 6.4.3, 7.0.7, 7.2.2, 6.2.4, 6.3.8

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2025-64446 17 exploits
CVSS 10.0 CRITICAL 2025-11-14FIX AVAILABLE
Exploit for Relative Path Traversal in Fortinet FortiwebExploit for OS Command Injection in Fortinet Fortiweb
CVE-2025-25257 17 exploits
CVSS 10.0 CRITICAL 2025-07-08FIX AVAILABLE
Exploit for SQL Injection in Fortinet FortiwebFortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
CVE-2023-25610 1 exploit
CVSS 10.0 CRITICAL 2023-03-07FIX AVAILABLE
Exploit for Buffer Underflow in Fortinet Fortiweb
CVE-2021-22123 2 exploits
CVSS 9.0 HIGH 2021-05-28
Fortinet FortiWeb 授权命令注入漏洞（CVE-2021-22123）Exploit for OS Command Injection in Fortinet Fortiweb
CVE-2025-52970 3 exploits
CVSS 8.1 HIGH 2025-08-12FIX AVAILABLE
Exploit for Improper Handling of Parameters in Fortinet FortiwebExploit for Improper Handling of Parameters in Fortinet Fortiweb