CVE-2022-45857

7.5 highEPSS 0.3%

High (7.5) in fortinet fortimanager. EPSS 0.3% chance of exploitation in the next 30 days.

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-286
Published: 2023-01-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimanager

References

https://fortiguard.com/psirt/FG-IR-22-371
https://fortiguard.com/psirt/FG-IR-22-371

Check your stack JSON