PT-2025-47363 · Fortinet · Fortivoice

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-58692

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiVoice versions 7.0.0 through 7.0.7 Fortinet FortiVoice versions 7.2.0 through 7.2.2

Description An SQL injection issue exists in Fortinet FortiVoice due to improper neutralization of special elements within SQL commands. An authenticated attacker can leverage this to execute unauthorized code or commands by sending specially crafted HTTP or HTTPS requests.

Recommendations Update Fortinet FortiVoice to a version later than 7.0.7. Update Fortinet FortiVoice to a version later than 7.2.2.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-14865

CVE-2025-58692

Affected Products

Fortivoice

References · 9

• https://fortiguard.fortinet.com/psirt/FG-IR-25-666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58692 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58692 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14865 · Security Note
• https://twitter.com/ZeroPathLabs/status/1990839744649924670 · Twitter Post
• https://t.me/CVEtracker/37645 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1990877049595036078 · Twitter Post
• https://twitter.com/CVEnew/status/1991042973400719514 · Twitter Post
• https://twitter.com/CveFindCom/status/1990882839403909221 · Twitter Post