Sign In

CVE-2025-53950

📊 5.5 MEDIUM⚡ 0.0%🎯 0 exploits
📅 Published Oct 16, 2025
📋 Status: Analyzed

An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information.

🎯 Affected Products & Systems

3 product configurations affected

Filter by type:
📱
Vulnerable
Version: ≥ 10.3.1 ∧ ≤ 11.5.1
CPE:
cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*
💻
apple / macos
Operating System
Safe
Version: All versions
CPE:
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
💻
microsoft / windows
Operating System
Safe
Version: All versions
CPE:
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Metrics
5.5 MEDIUMCVSS v3.1[email protected]
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
HIGH
User Interaction:
REQUIRED
Confidentiality:
HIGH
Integrity:
NONE
Availability:
NONE
Scope:
CHANGED

🔍 Technical Details

Analysis Status
Analyzed
CVSS Details
5.5 (MEDIUM)v3.1
Source: [email protected]
EPSS Details
0.0% (Minimal)1.5th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
Oct 16, 2025 (16 days ago)
Last Modified
Oct 16, 2025 (16 days ago)
Security Weaknesses1
References2