CVE-2022-22297

5.5 mediumEPSS 0.2%

Medium (5.5) in fortinet. EPSS 0.2% chance of exploitation in the next 30 days.

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-792
Published: 2023-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortirecorder_firmware
fortinet:fortiweb

References

https://fortiguard.com/psirt/FG-IR-21-218
https://fortiguard.com/psirt/FG-IR-21-218

Check your stack JSON