Fortideceptor (Fortinet) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 58 known versions, newest CVE from 2026-05-12. Vendor: Fortinet.
CVEs of Fortideceptor
- CVE-2026-25690 - CVSS 6.5 (medium), 2026-05-12: An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2,…
- CVE-2026-25689 - CVSS 6.5 (medium), 2026-03-10: An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all…
- CVE-2024-35280 - CVSS 6.1 (medium), 2025-01-15: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0,…
- CVE-2024-45326 - CVSS 4.3 (medium), 2025-01-14: An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all…
- CVE-2022-27487 - CVSS 8.8 (high), 2023-04-11: A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor version 4.1.0,…
- CVE-2023-26209 - CVSS 5.3 (medium), 2023-03-09: A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated…
- CVE-2022-30305 - CVSS 7.5 (high), 2022-12-06: An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0,…
- CVE-2022-38373 - CVSS 8 (high), 2022-11-02: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2…
- CVE-2022-30302 - CVSS 8.1 (high), 2022-07-19: Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1…
- CVE-2020-29017 - CVSS 8.8 (high), 2021-01-14: An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the…
- CVE-2020-6644 - CVSS 8.1 (high), 2020-06-22: An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain…
