[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5aZ4hEhpWsYO_Xwb6TmLs3mwPUOkC8nbTKSm3QqpSmI":3,"g5a-risk:CVE-2025-52970":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":25,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":52,"weaknesses":53,"weaknessesCount":39,"isActivelyExploited":62,"cisaInfo":25,"otxData":25,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":111,"notableEvents":112},"CVE-2025-52970","What is CVE-2025-52970?","A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.","A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below ma...","2025-08-12T19:15:32.277","2025-08-15T12:26:38.3",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[],[],0.10084,[30,30,30,30,30,30,30],"High",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"fortinet","fortiweb","*","cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",1,[41,46],{"url":42,"source":43,"tags":44},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-25-448","Fortinet",[45],"Vendor Advisory",{"url":47,"source":48,"tags":49},"https:\u002F\u002Fpwner.gg\u002Fblog\u002F2025-08-13-fortiweb-cve-2025-52970","Pwner",[50,51],"Exploit","Third Party Advisory",2,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-233","Improper Handling of Parameters","The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.","","Incomplete","Base","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2025-52970? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-52970, a high severity cyber security vulnerability from 2025. A improper handling of parameters in Fortinet FortiWeb vers...","CVE-2025-52970, CVE-2025-52970 vulnerability, CVE-2025-52970 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, fortiweb vulnerability","\u002Fwhat-is\u002Fcve-2025-52970",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-52970","Cybersecurity","CVE-2025-52970, CVE-2025-52970 vulnerability, CVE-2025-52970 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":25,"Negate":25,"Nodes":91},[92],{"Operator":93,"Negate":62,"CPEMatch":94},"OR",[95,99,103,107],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":96,"VersionStartExcluding":25,"VersionStartIncluding":97,"VersionEndExcluding":98,"VersionEndIncluding":25},"7E739890-CFEA-4B7B-B78D-8CC8157BDF54","7.0.0","7.0.11",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":100,"VersionStartExcluding":25,"VersionStartIncluding":101,"VersionEndExcluding":102,"VersionEndIncluding":25},"B642678E-4E31-4A6B-A791-ACD5D332B175","7.2.0","7.2.11",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":25},"CA8DE17C-1756-4B18-A956-A52CFA0967B9","7.4.0","7.4.8",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":108,"VersionStartExcluding":25,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":25},"2B739434-1979-43F9-AEC1-D287B1BCA5CA","7.6.0","7.6.4",[],[113,120,127],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"4a9483d2-fd50-4ee6-86de-7bae51fcb0c0","NEW_NVD","2025-08-13T04:01:11.547897+00:00","New CVE added to NVD","Published to NVD","blue",{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"91631eea-1526-40ca-ab3f-9201ad048e92","HIGH_EPSS_DELTA","2025-12-20T04:03:54.904349+00:00","Daily EPSS score increased by 0.187 on 2025-08-14","EPSS Score Increased","red",{"id":128,"eventType":129,"eventTime":130,"details":131,"label":132,"color":133},"e021b58c-9456-404d-a9c4-c1e5e612d080","LOW_EPSS_DELTA","2026-01-13T04:03:26.347909+00:00","Daily EPSS score decreased by 0.127 on 2025-08-14","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":135,"version":136},1792371386135,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},47,"Medium","Plan remediation","2026-10-16T07:08:25.329402+00:00"]