> Information Disclosure on SSLVPN endpoint
[DATE: 10/06/2025 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
3.9
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS SSL-VPN web-mode may allow an authenticated user to access full SSL-VPN settings via crafted URL.
Revised on 2026-06-15 00:00:00