CVE-2025-59719
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
An improper verification of cryptographic signature vulnerability exists in Fortinet FortiWeb versions 8.0.0, 7.6.0 through 7.6.4, and 7.4.0 through 7.4.9. This may allow an unauthenticated attacker to bypass FortiCloud SSO login authentication via a crafted SAML response message.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to data breaches or other serious security incidents.
Recommendation
It is recommended to update FortiWeb to the latest version to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Original NVD description (English source)
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.