diff --git a/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispExportSrv.scala b/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispExportSrv.scala
index d33f486745..561307a5f4 100644
--- a/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispExportSrv.scala
+++ b/misp/connector/src/main/scala/org/thp/thehive/connector/misp/services/MispExportSrv.scala
@@ -96,7 +96,7 @@ class MispExportSrv @Inject() (
     client.createEvent(
       info = `case`.title,
       date = `case`.startDate,
-      threatLevel = 4 - `case`.severity,
+      threatLevel = math.min(4, math.max(1, 4 - `case`.severity)),
       published = false,
       analysis = 0,
       distribution = 0,