{"history":[{"alert":0,"cve":"CVE-2022-40684","id":22337,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":19956,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":17922,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":15986,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":13964,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":11746,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":9732,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":1,"cve":"CVE-2022-40684","id":8253,"kind":"cna","observed_at":1793830801,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-03T12:21:46.541Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://fortiguard.com/psirt/FG-IR-22-377\"}, {\"tags\": [\"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html\"}, {\"tags\": [\"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2022-40684\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2022-10-11T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-10-11\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-287\", \"description\": \"CWE-287 Improper Authentication\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-06T03:55:36.678Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Fortinet FortiOS, FortiProxy, FortiSwitchManager\", \"vendor\": \"Fortinet\", \"versions\": [{\"status\": \"affected\", \"version\": \"FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"exploitCodeMaturity\": \"FUNCTIONAL\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"remediationLevel\": \"UNAVAILABLE\", \"reportConfidence\": \"CONFIRMED\", \"scope\": \"UNCHANGED\", \"temporalScore\": 9.6, \"temporalSeverity\": \"CRITICAL\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C\", \"version\": \"3.1\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Execute unauthorized code or commands\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-03-27T00:00:00.000Z\", \"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\"}, \"references\": [{\"url\": \"https://fortiguard.com/psirt/FG-IR-22-377\"}, {\"url\": \"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html\"}, {\"url\": \"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"assignerShortName\": \"fortinet\", \"cveId\": \"CVE-2022-40684\", \"datePublished\": \"2022-10-18T00:00:00.000Z\", \"dateReserved\": \"2022-09-14T00:00:00.000Z\", \"dateUpdated\": \"2026-08-06T03:55:36.678Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2022-40684","id":7280,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":5057,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":0,"cve":"CVE-2022-40684","id":2839,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.99984, \"percentile\": 0.99983}"},{"alert":1,"cve":"CVE-2022-40684","id":930,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2022-40684\", \"cwes\": [\"CWE-288\"], \"dateAdded\": \"2022-10-11\", \"dueDate\": \"2022-11-01\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://www.fortiguard.com/psirt/FG-IR-22-377;  https://nvd.nist.gov/vuln/detail/CVE-2022-40684\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.\", \"vendorProject\": \"Fortinet\", \"vulnerabilityName\": \"Fortinet Multiple Products Authentication Bypass Vulnerability\"}"}],"record":{"affected":[{"product":"Fortinet FortiOS, FortiProxy, FortiSwitchManager","vendor":"Fortinet","versions":[{"status":"affected","version":"FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-03T12:21:46.541Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://fortiguard.com/psirt/FG-IR-22-377"},{"tags":["x_transferred"],"url":"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html"},{"tags":["x_transferred"],"url":"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2022-40684","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2022-10-11T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-10-11","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-06T03:55:36.678Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Fortinet FortiOS, FortiProxy, FortiSwitchManager","vendor":"Fortinet","versions":[{"status":"affected","version":"FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0"}]}],"descriptions":[{"lang":"en","value":"An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","exploitCodeMaturity":"FUNCTIONAL","integrityImpact":"HIGH","privilegesRequired":"NONE","remediationLevel":"UNAVAILABLE","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":9.6,"temporalSeverity":"CRITICAL","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C","version":"3.1"}}],"problemTypes":[{"descriptions":[{"description":"Execute unauthorized code or commands","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2023-03-27T00:00:00.000Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","shortName":"fortinet"},"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-377"},{"url":"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html"},{"url":"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html"}]}},"cveMetadata":{"assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","assignerShortName":"fortinet","cveId":"CVE-2022-40684","datePublished":"2022-10-18T00:00:00.000Z","dateReserved":"2022-09-14T00:00:00.000Z","dateUpdated":"2026-08-06T03:55:36.678Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794306001,"cve":"CVE-2022-40684","description":"An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","epss":{"date":"2026-11-12","epss":0.99984,"percentile":0.99983},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2022-40684","cwes":["CWE-288"],"dateAdded":"2022-10-11","dueDate":"2022-11-01","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://www.fortiguard.com/psirt/FG-IR-22-377;  https://nvd.nist.gov/vuln/detail/CVE-2022-40684","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","vendorProject":"Fortinet","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Vulnerability"},"kev_checked":1794522003,"products":"Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager","references":["https://fortiguard.com/psirt/FG-IR-22-377","http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html","http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","exploitCodeMaturity":"FUNCTIONAL","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"fortinet","remediationLevel":"UNAVAILABLE","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":9.6,"temporalSeverity":"CRITICAL","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Fortinet Multiple Products Authentication Bypass Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}