CVE-2022-26119
Status: ModifiedHigh (7.8)—
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Base score: 7.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.20%
- Percentile among all scored CVEs: 9
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-798
References
Raw JSON (NVD)
Show
{
"id": "CVE-2022-26119",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-26119",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-10-23T14:12:15.590461Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@fortinet.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@fortinet.com",
"affectedData": [
{
"vendor": "Fortinet",
"product": "Fortinet FortiSIEM",
"versions": [
{
"status": "affected",
"version": "FortiSIEM 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 5.4.0, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.2, 5.2.1, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.1, 5.0.0"
}
]
}
]
}
],
"published": "2022-11-02T12:15:50.427",
"references": [
{
"url": "https://fortiguard.com/psirt/FG-IR-22-064",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@fortinet.com"
},
{
"url": "https://fortiguard.com/psirt/FG-IR-22-064",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password."
},
{
"lang": "es",
"value": "Una vulnerabilidad de autenticación incorrecta en Fortinet FortiSIEM anterior a 6.5.0 permite a un atacante local con acceso CLI realizar operaciones en el servidor Glassfish directamente a través de una contraseña codificada."
}
],
"lastModified": "2026-06-17T04:34:43.310",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685",
"versionEndIncluding": "5.1.3",
"versionStartIncluding": "5.1.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5F193AB-AC8D-4889-B34D-DEAF83E40B71",
"versionEndIncluding": "5.2.8",
"versionStartIncluding": "5.2.5"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0258A88-352D-4F9A-894D-F7442CAFE461",
"versionEndIncluding": "5.3.3",
"versionStartIncluding": "5.3.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24480037-F5CE-4CCE-800D-8C707B7F36AF",
"versionEndIncluding": "6.1.2",
"versionStartIncluding": "6.1.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9FC4C46-F269-4635-80BE-BED292538FEF",
"versionEndIncluding": "6.3.3",
"versionStartIncluding": "6.3.0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "966F62A1-10E7-4AFF-8725-2A4425179CA9"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9040EA7-86F7-4553-A0C8-A6C76B0C9E75"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE69B846-3B23-401D-98D0-46DC976A25FC"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE4C2A49-23CB-4104-A345-46B3B4A29A24"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91E43A1B-D4C5-4FFF-9D3E-00140023921E"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51452B16-AB83-41D3-8779-3E1AEA818AD1"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F453DE5-E31D-4BD1-8978-DD6D166045E0"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"
},
{
"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFFA27A5-0168-4261-9A04-D2DBB0A9946D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@fortinet.com"
}