---
id: CVE-2025-31514
title: >-
  A insertion of sensitive information into log file vulnerability in Fortinet
  FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all
  versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0
  through 7.…
summary: >-
  A insertion of sensitive information into log file vulnerability in Fortinet
  FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all
  versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0
  through 7.…
severity: low
cvss: 2.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-532
vendor: Fortinet
product: FortiOS
affected:
  - FortiOS >= 7.6.0 <= 7.6.2
  - FortiOS >= 7.4.0 <= 7.4.11
  - FortiOS >= 7.2.0 <= 7.2.13
  - FortiOS >= 7.0.0 <= 7.0.19
  - FortiOS >= 6.4.0 <= 6.4.16
  - FortiProxy >= 7.6.0 <= 7.6.3
  - FortiProxy >= 7.4.0 <= 7.4.13
  - FortiProxy >= 7.2.0 <= 7.2.16
  - FortiProxy >= 7.0.0 <= 7.0.23
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-10-14T16:33:10.794782Z'
published: '2025-10-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:06:02.465Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-31514'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-452'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-452'
tags:
  - cve.org
epss: 0.00361
epssPercentile: 0.28241
ingestedAt: '2026-10-15T05:52:46.100Z'
---

## Overview

A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>

## Affected

- `FortiOS >= 7.6.0 <= 7.6.2`
- `FortiOS >= 7.4.0 <= 7.4.11`
- `FortiOS >= 7.2.0 <= 7.2.13`
- `FortiOS >= 7.0.0 <= 7.0.19`
- `FortiOS >= 6.4.0 <= 6.4.16`
- `FortiProxy >= 7.6.0 <= 7.6.3`
- `FortiProxy >= 7.4.0 <= 7.4.13`
- `FortiProxy >= 7.2.0 <= 7.2.16`
- `FortiProxy >= 7.0.0 <= 7.0.23`

## Remediation

Upgrade to FortiProxy version 7.6.4 or above
Upgrade to upcoming  FortiProxy version 7.4.14 or above
Upgrade to FortiOS version 7.6.4 or above