CVE-2022-30301: Fortinet Fortiap-U

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands.

Affected products

• Fortinet Fortiap-U: from 6.0.0, up to and including 6.0.4; from 6.2.0, up to and including 6.2.3; version 5.4.0 only; version 5.4.3 only; version 5.4.4 only; version 5.4.5 only; …

Published 2022-07-19. Last modified 2026-06-17.