Fortinet Security Updates – 11 June 2025

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, conduct server-side request forgery attacks, bypass security restrictions, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. Multiple OS Command Injection in Web Vulnerability Scanner (CVE-2025- 31104):

• CVSS: 7
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Access

2. Fortinet FortiOS Improper Privilege Management Vulnerability in GUI Websocket Module (CVE-2025-22254):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• FortiManager.
• FortiAnalyzer.
• FortiOS.
• FortiProxy.
• FortiWeb.