[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkmj7rnrYM1UFK1bMscW6-LpbbBfXLXiCKfNJPMue6Ts":3,"g5a-risk:CVE-2025-64447":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":25,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":39,"weaknesses":46,"weaknessesCount":39,"isActivelyExploited":55,"cisaInfo":25,"otxData":25,"relatedBlogPosts":56,"seoMetadata":57,"configurations":82,"relatedVendorCves":108,"notableEvents":109},"CVE-2025-64447","What is CVE-2025-64447?","A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute arbitrary operations on the system via crafted HTTP or HTTPS request via forged cookies, requiring prior knowledge of the FortiWeb serial number.","A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWe...","2025-12-09T18:16:05.227","2025-12-09T20:40:27.99",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[],[],0.07365,[30,30,30,30,30,30,30],"High",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"fortinet","fortiweb","*","cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",1,[41],{"url":42,"source":43,"tags":44},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-25-945","Fortinet",[45],"Vendor Advisory",[47],{"id":48,"name":49,"description":50,"extendedDescription":51,"status":52,"abstraction":53,"structure":54},"CWE-565","Reliance on Cookies without Validation and Integrity Checking","The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.","Attackers can easily modify cookies, within the browser or by implementing the client-side code outside of the browser. Reliance on cookies without detailed validation and integrity checking can allow attackers to bypass authentication, conduct injection attacks such as SQL injection and cross-site scripting, or otherwise modify inputs in unexpected ways.","Incomplete","Base","Simple",false,[],{"title":58,"metaDescription":59,"keywords":60,"canonicalUrl":61,"structuredData":62},"What is CVE-2025-64447? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-64447, a high severity cyber security vulnerability from 2025. A reliance on cookies without validation and integrity chec...","CVE-2025-64447, CVE-2025-64447 vulnerability, CVE-2025-64447 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, fortiweb vulnerability","\u002Fwhat-is\u002Fcve-2025-64447",{"@context":63,"@type":64,"headline":58,"description":59,"datePublished":10,"dateModified":11,"author":65,"publisher":69,"about":73,"mainEntityOfPage":77,"articleSection":80,"keywords":81},"https:\u002F\u002Fschema.org","TechArticle",{"@type":66,"name":67,"url":68},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":66,"name":67,"url":68,"logo":70},{"@type":71,"url":72},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":74,"name":6,"description":75,"additionalType":76},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":78,"@id":79},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-64447","Cybersecurity","CVE-2025-64447, CVE-2025-64447 vulnerability, CVE-2025-64447 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[83],{"Operator":25,"Negate":25,"Nodes":84},[85],{"Operator":86,"Negate":55,"CPEMatch":87},"OR",[88,92,96,100,104],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":89,"VersionStartExcluding":25,"VersionStartIncluding":90,"VersionEndExcluding":25,"VersionEndIncluding":91},"9B46A0B2-ED2C-4836-8E72-CE1D4F3545E5","7.0.0","7.0.11",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":93,"VersionStartExcluding":25,"VersionStartIncluding":94,"VersionEndExcluding":25,"VersionEndIncluding":95},"E60D5043-7CE7-4DD1-B2DB-B6B08ABFAD13","7.2.0","7.2.11",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":97,"VersionStartExcluding":25,"VersionStartIncluding":98,"VersionEndExcluding":25,"VersionEndIncluding":99},"FF87852D-C4E8-441A-9443-CB0BA0812568","7.4.0","7.4.10",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":101,"VersionStartExcluding":25,"VersionStartIncluding":102,"VersionEndExcluding":25,"VersionEndIncluding":103},"A162A55D-A22C-43F3-A77A-B8FB8214D6C3","7.6.0","7.6.5",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":105,"VersionStartExcluding":25,"VersionStartIncluding":106,"VersionEndExcluding":25,"VersionEndIncluding":107},"2A628CC4-1789-4DAB-AFF0-96EDD7AEF0A6","8.0.0","8.0.1",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"66fb85fb-e560-4719-a188-5d84af97f81a","NEW_NVD","2025-12-10T04:01:25.788244+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":118,"version":119},1793202569025,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},48,"Medium","Plan remediation","2026-07-01T10:38:20.426487+00:00"]