CVE-2022-35842: Fortinet FortiOS

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS.

Affected products

• Fortinet FortiOS: from 6.4.0, up to and including 6.4.9; from 7.0.0, up to and including 7.0.6; version 7.2.0 only

Published 2022-11-02. Last modified 2026-06-17.