Fortinet Fortidlp Agent — known CVE vulnerabilities

Every CVE whose affected-product data names Fortinet Fortidlp Agent, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-54658 — CVSS 7.8 (high): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's…
• CVE-2025-53950 — CVSS 5.5 (medium): An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin…
• CVE-2025-53951 — CVSS 5.3 (medium): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's…
• CVE-2025-46752 — CVSS 4.4 (medium): A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to…