s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2025-47856

📛 CVE Title

CVE-2025-47856

⬇ Download JSON ⚠ View as Threat

Description

Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.

Overview

State
PUBLISHED
Assigner (CNA)
fortinet
CVSS severity
HIGH
CVSS score
CVSS 7.2 / 10 7.2 7.2 / 10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C
Effective score
7.2 / 10 HIGH source: CNA overview
CWE(s)
CWE-78
Reserved
2025-05-12
Published
2025-10-14 15:42 UTC
Last updated
2025-10-14 15:57 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/47xxx/CVE-2025-47856.json
Linked Threat
CVE-2025-47856 — CVE-2025-47856

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published
2025-10-14 14:15:49 UTC
NVD last modified
2026-06-17 09:28:46 UTC
NVD CVSS v3.1
CVSS 7.2 / 10 7.2 7.2 / 10 HIGH source: psirt@fortinet.com
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore
1.2 / 10
Impact subscore
5.9 / 10
EPSS score
0.0136 (probability of exploitation in next 30 days)
EPSS percentile
68.80% vs all CVEs — higher = more likely to be exploited, as of 2026-07-27

NVD / KEV / EPSS data refreshed 2026-07-27 19:24 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2025-34219
Assigner
fortinet
Published
Oct 14, 2025, 1:42:47 PM
Updated
Oct 14, 2025, 1:57:19 PM
EUVD base score (CVSS 3.1)
7.2 / 10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C
EUVD-reported EPSS
0.1700
Vendors
Fortinet
Products
FortiVoice (7.0.0 ≤7.0.6)
FortiVoice (6.4.0 ≤6.4.10)
FortiVoice (7.2.0)
Aliases
GHSA-3753-7733-qrv7

ENISA description: Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.

EUVD references (1)

Affected products (1)
VendorProductVersionsPlatforms
Fortinet FortiVoice 7.2.0 (affected), 7.0.0 (affected), 6.4.0 (affected) —

Affected products — CPE 2.3 (2) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

  • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

MITRE references (1) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

NVD-tagged references (1)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025 ...
    web:cisa.gov

    Update (08/12/ 2025 ): CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization's networks and provided further guidance on running the Microsoft Exchange Health Checker. Update (08/07/ 2025 ): CISA issued Emergency Directive (ED) 25-02: Mitigate Microsoft Exchange Vulnerability in response to CVE - 2025 -53786

    2026-05-22 14:02 UTC
  • CVE-2025-47956 - Windows Security App Spoofing Vulnerability
    web:cvefeed.io

    External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

    2026-05-22 14:02 UTC
  • CVE-2025-47956 - Exploits & Severity - Feedly
    web:feedly.com

    Threat Intelligence Report CVE - 2025 -47956 is a local spoofing vulnerability in the Windows Security App, categorized as CWE-73, allowing an attacker with local access to manipulate file and path names and deceive users, potentially undermining trust in security alerts. Addressed in the June 2025 Patch Tuesday update (KB5007651), systems should be updated to version 10..27840.1000 or later to ...

    2026-05-22 14:02 UTC
  • Nvd - Cve-2025-47956
    web:nvd.nist.gov

    An official website of the United States government Here's how you know

    2026-05-22 14:02 UTC
  • Security Update Guide - Microsoft
    web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

    2026-05-22 14:02 UTC
  • Cve-2025-47956
    web:vulmon.com

    Vulnerability details of CVE - 2025 -47956 Microsoft June 2025 Patch Tuesday fixes exploited zero-day, 66 flaws By Lawrence Abrams June 10, 2025 01:37 PM 0 .crit { font-weight:bold; color:red; } .article_section td { font-size: 14px!important; } Today is Microsoft's June 2025 Patch Tuesday, which includes security updates for 66 flaws, including one actively exploited vulnerability and another ...

    2026-05-22 14:02 UTC
  • CVE Record: CVE-2025-47956
    web:www.cve.org

    Vulnerability detail for CVE - 2025 -47956 Notice: Expanded keyword searching of CVE Records (with limitations) is now available in the search box above. Learn more here.

    2026-05-22 14:02 UTC
  • Microsoft Patches 86 Vulnerabilities - SecurityWeek
    web:www.securityweek.com

    Microsoft has released patches for dozens of flaws in Windows and other products, including ones with a 'likely exploitation' rating.

    2026-05-22 14:02 UTC
  • CVE-2025-47956: Windows Security App Path Traversal Flaw
    web:www.sentinelone.com

    CVE - 2025 -47956 is a path traversal vulnerability in Windows Security App. Learn about its impact, affected versions, and mitigation methods.

    2026-05-22 14:02 UTC
  • Microsoft Issues Massive Windows Patch for 160+ Bugs ... - TechRepublic
    web:www.techrepublic.com

    Microsoft's April 2026 Patch Tuesday fixes 165 vulnerabilities, including two zero-days, in one of the company's largest monthly security updates.

    2026-05-22 14:02 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-47856.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-47856",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-14T13:57:13.891238Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-14T13:57:19.331Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FortiVoice",
          "vendor": "Fortinet",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "lessThanOrEqual": "7.0.6",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.10",
              "status": "affected",
              "version": "6.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Execute unauthorized code or commands",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-14T13:42:47.612Z",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "https://fortiguard.fortinet.com/psirt/FG-IR-25-250",
          "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-250"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Please upgrade to FortiVoice version 7.2.1 or above \nPlease upgrade to FortiVoice version 7.0.7 or above \nPlease upgrade to FortiVoice version 6.4.11 or above"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2025-47856",
    "datePublished": "2025-10-14T13:42:47.612Z",
    "dateReserved": "2025-05-12T13:58:15.236Z",
    "dateUpdated": "2025-10-14T13:57:19.331Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}