{"id":"CVE-2025-53609","published":"2025-09-09T13:50:41Z","modified":"2026-01-14T09:17:25Z","title":"A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through…","vendor":"Fortinet","product":"FortiWeb","tier":"tail","description":{"text":"A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attacker to perform an arbitrary file read on the underlying system via crafted requests.","provenance":"source","from":"CVE.org"},"cvss":{"score":4.7,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.10649,"percentile":0.95781,"provenance":"source"},"cwes":[{"id":"CWE-23","name":"Relative Path Traversal"}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-512","tags":[]}],"priority":{"score":22.4,"factors":[{"name":"EPSS percentile","points":19.16},{"name":"CVSS severity","points":3.29}]},"vendorSlug":"fortinet","affectedVersions":[{"vendor":"Fortinet","product":"FortiWeb","versions":[">= 7.6.0, <= 7.6.4",">= 7.4.0, <= 7.4.8",">= 7.2.0, <= 7.2.11",">= 7.0.2, <= 7.0.12"]}],"euvd":{"id":"EUVD-2025-27259","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-fortinet-fortiweb-cwe-23"}}