EUVD-2022-45548

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Improper Authentication Attempts in FortiSIEM 7.0.0 may allow brute force attacks by non-privileged users

Reporter	Title	Published	Views	Family All 11
CNNVD	Fortinet FortiSIEM 安全漏洞	13 Jun 202300:00	–	cnnvd
CNVD	Fortinet FortiSIEM Access Control Error Vulnerability	21 Jun 202300:00	–	cnvd
CVE	CVE-2022-42478	13 Jun 202308:41	–	cve
Cvelist	CVE-2022-42478	13 Jun 202308:41	–	cvelist
Fortinet	FortiSIEM - Bruteforce of Exposed Endpoints	12 Jun 202300:00	–	fortinet
NVD	CVE-2022-42478	13 Jun 202309:15	–	nvd
OSV	CVE-2022-42478	13 Jun 202309:15	–	osv
Prion	Input validation	13 Jun 202309:15	–	prion
Positive Technologies	PT-2023-3351 · Fortinet · Fortisiem	9 Jun 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-42478	5 Feb 202522:10	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "7a1f1ebf-5066-3076-abcd-eb05f649188d",
        "vendor": {
          "name": "Fortinet"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c38b821-0836-3969-82ff-44083a04910c",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.7.0"
      },
      {
        "id": "17d94eff-cd6e-36b8-9daa-afe469b2bcb0",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.3.0 ≤6.3.3"
      },
      {
        "id": "18cf11be-4afa-36b2-bd35-310432cbaa39",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "5.2.1 ≤5.2.2"
      },
      {
        "id": "676697a7-9b2e-3b7f-b017-c6c7e639f084",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.2.0 ≤6.2.1"
      },
      {
        "id": "6c3bdc2d-0a9b-32c7-9143-9ecd8bd9841d",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "5.4.0"
      },
      {
        "id": "832d9005-17e1-3a3a-9cb2-f9e43542ce5d",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "5.3.0 ≤5.3.3"
      },
      {
        "id": "8423dc8a-7213-308a-be45-b633c9040742",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.4.0 ≤6.4.2"
      },
      {
        "id": "bb09e747-532b-3de6-838c-734c14055ce8",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.6.0 ≤6.6.3"
      },
      {
        "id": "c5e1f526-31d3-39f9-ba95-3d49b7a04e1d",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.5.0 ≤6.5.1"
      },
      {
        "id": "dad828ad-1fa1-3e2d-905c-a6d47463a48e",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "5.2.5 ≤5.2.8"
      },
      {
        "id": "e9112951-de7d-3332-b46a-18970e903ed6",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "6.1.0 ≤6.1.2"
      },
      {
        "id": "f8513006-cc17-3024-acf5-0ee333fb7059",
        "product": {
          "name": "FortiSIEM"
        },
        "product_version": "5.1.0 ≤5.1.3"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-22-258

03 Oct 2025 20:07Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.1 - 8.8

EPSS0.00212

SSVC