FortiDLP 12.0.0-12.0.5 Log Injection: Info Disclosure via Enrollment Code
CVE-2025-46752 Published on October 16, 2025
A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.
Vulnerability Analysis
CVE-2025-46752 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
Products Associated with CVE-2025-46752
Want to know whenever a new CVE is published for Fortinet Fortidlp? stack.watch will email you.
Affected Versions
Fortinet FortiDLP:- Version 12.0.4, <= 12.0.5 is affected.
- Version 12.0.2 is affected.
- Version 12.0.0 is affected.
- Version 11.5.1 is affected.
- Version 11.4.5, <= 11.4.6 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.