Fortinet Fortidlp Agent vulnerabilities

4 CVEs affecting Fortinet Fortidlp Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-54658, published 2025-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-54658, published 2025-10-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.2 through 11.4.6…
CVE-2025-53951, published 2025-10-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for Windows 11.5.1 and 11.4.2 through 11.4.6…
CVE-2025-53950, published 2025-10-16. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and…
CVE-2025-46752, published 2025-10-16. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.