Medium severity4.7NVD Advisory· Published Nov 19, 2025· Updated Jun 17, 2026
CVE-2025-58412
CVE-2025-58412
Description
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.3, FortiADC 7.4 all versions, FortiADC 7.2 all versions may allow attacker to execute unauthorized code or commands via crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=7.2.0,<7.6.4
- cpe:2.3:a:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*range: 8.0.0
- Range: 8.0.0, 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions
Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-25-736nvdVendor Advisory
News mentions
0No linked articles in our index yet.