Fortinet FortiVoice 7.2.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*

part: a version: 7.2.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortivoice (a311f371-4e64-50e1-800f-e95f5aeab3ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64156 vulnerable 2026-06-08 07:39:18.128376 Details available
MEDIUM (6.8)
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests
Published: 2025-12-09T17:18:45.540Z
Updated: 2026-02-26T16:57:01.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60024 vulnerable 2026-06-08 07:37:26.505010 Details available
HIGH (7.7)
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands
Published: 2025-12-09T17:18:44.551Z
Updated: 2026-02-26T16:57:02.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58693 vulnerable 2026-06-08 07:35:19.016827 Details available
MEDIUM (5.7)
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.
Published: 2026-01-13T16:32:29.011Z
Updated: 2026-01-14T09:16:23.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58692 vulnerable 2026-06-08 07:35:19.015363 Details available
HIGH (7.7)
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.
Published: 2025-11-18T17:01:13.626Z
Updated: 2026-02-26T16:21:13.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55717 vulnerable 2026-06-08 07:33:15.287602 Details available
LOW (3.8)
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device.
Published: 2026-03-10T16:44:08.324Z
Updated: 2026-03-10T20:32:47.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47856 vulnerable 2026-06-08 07:27:14.919746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32756 vulnerable 2026-06-08 07:19:00.791760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.