diff --git a/cves/2021/CVE-2021-22122.yaml b/cves/2021/CVE-2021-22122.yaml
index 2a6ccdf94c..a9b5595b07 100644
--- a/cves/2021/CVE-2021-22122.yaml
+++ b/cves/2021/CVE-2021-22122.yaml
@@ -3,7 +3,7 @@ id: CVE-2021-22122
 info:
   name: FortiWeb v6.3.x-6.2.x Unauthenticated XSS
   author: dwisiswant0
-  severity: critical
+  severity: medium
 
   # FortiWeb GUI interface may allow an unauthenticated, remote attacker
   # to perform a reflected cross site scripting attack (XSS) by injecting