What is the CVSS score of CVE-2025-67685?

CVE-2025-67685 has a CVSS 3.1 base score of 3.8 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Fortinet are affected by CVE-2025-67685?

CVE-2025-67685 is a low-severity vulnerability in Fortinet FortiSandbox 5.0.0 involving SSRF (CVSS 3.8).

How to fix or mitigate CVE-2025-67685?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Fortinet CVE-2025-67685

LOW

Server-Side Request Forgery (SSRF) (CWE-918)

2026-01-13 psirt@fortinet.com

Fortinet SSRF

3.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 13, 2026 - 17:15 nvd

LOW 3.8

DescriptionNVD

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests.

AnalysisAI

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Affects Fortisandbox. A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

CVE-2025-67685 vulnerability details – vuln.today

Back