FO
Product
FortiDeceptor
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 0
Watch
Add FortiDeceptor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-27487 | 8.8 | Apr 11 | A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor version 4.1.0, 4.0.0 through 4.0.2 and… Affected: 1.0 before 3.3.3; 4.0.0 through 4.0.2; 4.1.0 |
| CVE-2020-29017 | 8.8 | Jan 14 | An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a… Affected: 3.0.0; 3.0.1; 3.1.0 |
| CVE-2022-30302 | 8.1 | Jul 19 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote… Affected: 1.0.0 through 3.2.2; 3.3.0 through 3.3.2; 4.0.0; 4.0.1 |
| CVE-2020-6644 | 8.1 | Jun 22 | An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should… Affected: through 3.0.0 |
| CVE-2022-30305 | 7.5 | Dec 6 | An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1,… Affected: 3.0.0 through 3.0.2; 3.2.0 through 3.2.2; 3.3.0 through 3.3.3; 4.0.0 through 4.0.2; 3.1.0; 3.1.1; +3 more |
| CVE-2026-25690 | 6.5 | May 12 | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through… Affected: 6.0.0 through 6.0.2; 5.3.0 through 5.3.3; 5.2.0 through 5.2.1; 5.1.0; 5.0.0 |
| CVE-2026-25689 | 6.5 | Mar 10 | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor… Affected: 4.0.0 through 6.0.3; 6.2.0 |
| CVE-2024-35280 | 6.1 | Jan 15 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all… Affected: 3.0.0 before 5.2.1; 5.3.0 |
| CVE-2022-38373 | 5.4 | Nov 2 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an… Affected: 4.0.2; 4.1.0; 4.1.1; 4.2.0 |
| CVE-2023-26209 | 5.3 | Mar 9 | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated attacker to… Affected: 1.0.0 before 3.2.0 |
| CVE-2024-45326 | 4.3 | Jan 14 | An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1… Affected: 5.0.0 before 6.0.1 |
Showing 11