CVE-2022-23443: Fortinet Fortisoar

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.

Affected products

• Fortinet Fortisoar: from 6.4.0, up to and including 6.4.4; from 7.0.0, up to and including 7.0.2; version 6.0.0 only

Published 2022-05-04. Last modified 2026-06-17.