[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwaP0zlJZes6afJcThqioy8qMIcqMm_NJKdpW0QMibjk":3,"g5a-risk:CVE-2025-49201":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":54,"references":55,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":27,"otxData":27,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":118,"notableEvents":119},"CVE-2025-49201","What is CVE-2025-49201?","A weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to execute unauthorized code or commands via specially crafted http requests","A weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManag...","2025-10-14T16:15:38.84","2025-10-15T17:18:16.82",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","UNCHANGED",8.1,null,2.2,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":34,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"LOW","CRITICAL",3.9,[],[],0.00582,[39,39,39,39,39,39,39],"Critical",[43,48,51],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"fortinet","fortipam","*","cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"1.5.0","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":52,"version":46,"criteria":53,"vulnerable":4},"fortiswitchmanager","cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*",3,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-25-010","Fortinet",[60],"Vendor Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-1390","Weak Authentication","The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.","Attackers may be able to bypass weak authentication faster and\u002For with less effort than expected.","Incomplete","Class","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2025-49201? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-49201, a critical severity cyber security vulnerability from 2025. A weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0...","CVE-2025-49201, CVE-2025-49201 vulnerability, CVE-2025-49201 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, fortipam vulnerability, fortiswitchmanager vulnerability","\u002Fwhat-is\u002Fcve-2025-49201",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-49201","Cybersecurity","CVE-2025-49201, CVE-2025-49201 vulnerability, CVE-2025-49201 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99,110],{"Operator":27,"Negate":27,"Nodes":100},[101],{"Operator":102,"Negate":71,"CPEMatch":103},"OR",[104,108],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":106,"VersionEndExcluding":107,"VersionEndIncluding":27},"6C39FBB2-E81C-4207-AFDD-080EC80F00A3","1.0.0","1.4.3",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0401C6C0-DC87-4728-873E-6DA489C859A8",{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":102,"Negate":71,"CPEMatch":113},[114],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":116,"VersionEndExcluding":117,"VersionEndIncluding":27},"EA41837A-E903-4B24-98C1-79B7142DCF37","7.2.0","7.2.5",[],[120],{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"11384529-ea34-472b-aa3b-9238443a11ab","NEW_NVD","2025-10-15T04:01:18.436584+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":128,"version":129},1793197065632,"2.0",{"score":131,"band":132,"action":133,"scoredAt":134},54,"Medium","Plan remediation","2026-07-01T10:37:52.901764+00:00"]