CVE-2022-27484

4.3 mediumEPSS 0.5%

Medium (4.3) in fortinet fortiadc. EPSS 0.5% chance of exploitation in the next 30 days.

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-08-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiadc

References

https://fortiguard.com/psirt/FG-IR-22-055
https://fortiguard.com/psirt/FG-IR-22-055

Check your stack JSON