{"id":"CVE-2025-31514","title":"A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.…","summary":"A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.…","severity":"low","cvss":2.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-532"],"vendor":"Fortinet","product":"FortiOS","affected":["FortiOS >= 7.6.0 <= 7.6.2","FortiOS >= 7.4.0 <= 7.4.11","FortiOS >= 7.2.0 <= 7.2.13","FortiOS >= 7.0.0 <= 7.0.19","FortiOS >= 6.4.0 <= 6.4.16","FortiProxy >= 7.6.0 <= 7.6.3","FortiProxy >= 7.4.0 <= 7.4.13","FortiProxy >= 7.2.0 <= 7.2.16","FortiProxy >= 7.0.0 <= 7.0.23"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-14T16:33:10.794782Z"},"published":"2025-10-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:06:02.465Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-31514","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-452","label":"https://fortiguard.fortinet.com/psirt/FG-IR-24-452"}],"tags":["cve.org"],"epss":0.00361,"epssPercentile":0.28241,"ingestedAt":"2026-10-15T05:52:46.100Z","slug":"CVE-2025-31514","body":"## Overview\n\nA insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>\n\n## Affected\n\n- `FortiOS >= 7.6.0 <= 7.6.2`\n- `FortiOS >= 7.4.0 <= 7.4.11`\n- `FortiOS >= 7.2.0 <= 7.2.13`\n- `FortiOS >= 7.0.0 <= 7.0.19`\n- `FortiOS >= 6.4.0 <= 6.4.16`\n- `FortiProxy >= 7.6.0 <= 7.6.3`\n- `FortiProxy >= 7.4.0 <= 7.4.13`\n- `FortiProxy >= 7.2.0 <= 7.2.16`\n- `FortiProxy >= 7.0.0 <= 7.0.23`\n\n## Remediation\n\nUpgrade to FortiProxy version 7.6.4 or above\nUpgrade to upcoming  FortiProxy version 7.4.14 or above\nUpgrade to FortiOS version 7.6.4 or above","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":14.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}