"The Fortinet vulnerabilities affect FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager and relate to a case of improper verification of a cryptographic signature. They are tracked as CVE-2025-59718 and CVE-2025-59719 (CVSS scores: 9.8). "An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message, if that feature is enabled on the device," Fortinet said in an advisory. The company, however, noted that the FortiCloud SSO login feature is not enabled in the default factory settings. FortiCloud SSO login is enabled when an administrator registers the device to FortiCare and has not disabled the toggle "Allow administrative login using FortiCloud SSO" in the registration page."
"Ivanti has also shipped updates to address four security flaws in Endpoint Manager (EPM), one of which is a critical severity bug in the EPM core and remote consoles. The vulnerability, assigned the CVE identifier CVE-2025-10573, carries a CVSS score of 9.6. "Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator ses"
Fortinet vulnerabilities affect FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager and are tracked as CVE-2025-59718 and CVE-2025-59719 with CVSS scores of 9.8. Improper verification of a cryptographic signature may allow an unauthenticated attacker to bypass FortiCloud SSO login via a crafted SAML message when the feature is enabled. FortiCloud SSO is not enabled by default and becomes active when an administrator registers the device to FortiCare without disabling the Allow administrative login using FortiCloud SSO toggle. Temporary mitigation is to disable FortiCloud SSO via the GUI or the CLI command. Ivanti released updates addressing four EPM flaws including CVE-2025-10573 (CVSS 9.6), a stored XSS vulnerability that can allow execution of arbitrary JavaScript in an administrator context. SAP products were also noted as having critical security flaws requiring fixes to prevent authentication bypass or code execution.
Read at The Hacker News
Unable to calculate read time
Collection
[
|
...
]