Fortinet, Ivanti, and SAP Issue Urgent Patches for Critical Flaws

Multiple enterprise vendors have released emergency patches addressing critical vulnerabilities that are being actively exploited in the wild.

Fortinet FortiOS - CVE-2025-XXXX

Vulnerability Details

| Attribute | Details | |-----------|---------| | Severity | Critical (CVSS 9.6) | | Type | Authentication Bypass | | Affected | FortiOS 7.0.x - 7.4.x | | Exploitation | Active in the wild |

Impact

Unauthenticated attackers can:

Bypass SSL VPN authentication
Access internal network resources
Pivot to additional targets

Remediation

# Verify current version
get system status

# Upgrade to patched version
execute restore image tftp <server> <filename>

Ivanti Connect Secure - CVE-2025-YYYY

Vulnerability Chain

Attackers are chaining two vulnerabilities:

Authentication Bypass: Access admin panel without credentials
Command Injection: Execute arbitrary commands as root

Indicators of Compromise

Unexpected admin sessions
Modified configuration files
Webshells in /dana-na/ directories
Outbound connections to suspicious IPs

SAP Applications - Multiple CVEs

Critical Patches

| Application | CVE | Type | CVSS | |-------------|-----|------|------| | SAP NetWeaver | CVE-2025-A | Code Injection | 9.8 | | SAP S/4HANA | CVE-2025-B | Auth Bypass | 9.1 | | SAP BTP | CVE-2025-C | SSRF | 8.6 |

Why SAP Vulnerabilities Matter

SAP systems often contain:

Financial transaction data
Employee PII
Supply chain information
Business-critical processes

Immediate Actions Required

Inventory: Identify all affected systems
Prioritize: Focus on internet-facing assets first
Patch: Apply updates during emergency maintenance window
Verify: Confirm successful patching
Hunt: Look for signs of prior compromise

How RaptorX Helps

RaptorX's continuous scanning automatically:

Detects vulnerable versions of enterprise software
Prioritizes critical CVEs for immediate attention
Validates patch effectiveness
Monitors for regression after updates

Don't wait for the next Patch Tuesday. RaptorX provides continuous vulnerability assessment so you can remediate before attackers exploit.

Read full advisory →