CVE-2022-23443

7.5 highEPSS 1.3%

High (7.5) in fortinet fortisoar. EPSS 1.3% chance of exploitation in the next 30 days.

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2022-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortisoar

References

https://fortiguard.com/psirt/FG-IR-22-041
https://fortiguard.com/psirt/FG-IR-22-041

Check your stack JSON