CVE-2025-61713: Fortinet Fortipam

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.

Affected products

• Fortinet Fortipam: from 1.0.0, before 1.6.1 (fixed in 1.6.1)

Published 2025-11-18. Last modified 2026-06-17.