Cyber Resilience

CVE-2025-25255

Fortinet Fortiproxy 7.0.1 – 7.6.4

Published
14 October 2025
Modified
14 January 2026
Patch / advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0040 33th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-25255 is a medium-severity Improperly Implemented Security Check for Standard (CWE-358) vulnerability in Fortinet Fortiproxy. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 33th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user to bypass…

more

the domain fronting protection feature via crafted HTTP requests.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-33510Same product: Fortinet Fortios
CVE-2024-55599Same product: Fortinet Fortios
CVE-2023-45586Same product: Fortinet Fortios
CVE-2023-29184Same product: Fortinet Fortios
CVE-2024-26006Same product: Fortinet Fortios
CVE-2025-22862Same product: Fortinet Fortios
CVE-2023-33306Same product: Fortinet Fortios
CVE-2023-36641Same product: Fortinet Fortios
CVE-2024-52965Same product: Fortinet Fortios
CVE-2024-23112Same product: Fortinet Fortios

Affected Assets

fortinet
fortiproxy
7.0.1 — 7.6.4
fortinet
fortios
7.6.0 — 7.6.4

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • AC-3 Access Enforcement
  • AC-4 Information Flow Enforcement
  • SC-7 Boundary Protection
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V17.2.8

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly enforces the domain-fronting security policy on proxy requests so that crafted HTTP headers cannot bypass the intended access restriction.

prevent

Enforces correct information-flow rules between external clients and internal destinations, blocking the header manipulation that defeats domain-fronting protection.

prevent

Requires boundary devices such as FortiProxy to inspect and filter traffic at the network edge, limiting the ability of unauthenticated users to evade domain-fronting controls.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require correct implementation of standardized security checks and algorithms.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development and acceptance validates that required security checks function as specified.

prevents

Use of cryptography control depends on correct implementation of standardized cryptographic checks.

prevents

Secure development life cycle mandates verification that security checks required by standards are correctly implemented.

prevents

Application security requirements explicitly call for correct implementation of standardized security mechanisms.

prevents

Secure system architecture and engineering principles require faithful realization of protocol-level security checks.

prevents

Secure coding practices directly address correct implementation of security-relevant checks in standardized algorithms.

References