Advisories · Technology
Fortinet FortiDeceptor.
Every CVE that names Fortinet FortiDeceptor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.0 Medium
Argument injection in Fortinet FortiDeceptor
- Fortinet FortiDeceptor
- Command injection
- CVSS 6.0 Medium
Argument injection in Fortinet FortiDeceptor
- Fortinet FortiDeceptor
- Command injection
- CVSS 5.1 Medium
Cross-site scripting in Fortinet FortiDeceptor
- Fortinet FortiDeceptor
- Cross-site scripting (XSS)
- CVSS 3.9 Low
Improper access control in Fortinet FortiDeceptor
- Fortinet FortiDeceptor
- Broken access control
- CVSS 8.3 High
Improper privilege management in Fortinet FortiDeceptor and others
- Fortinet FortiDeceptor
- Fortinet FortiSandbox
- Privilege escalation
- CVSS 3.5 Low
Unlimited authentication attempts in Fortinet FortiDeceptor
- Fortinet FortiDeceptor
- Authentication bypass
- CVSS 3.6 Low
Fortinet FortiSandbox: An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2…
- Fortinet FortiSandbox
- Fortinet FortiDeceptor
- CWE-778
- CVSS 8.0 High
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perfor…
- Fortinet FortiDeceptor
- CVSS 6.5 Medium
Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated atta…
- Fortinet FortiDeceptor
-
An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vuln…
- Fortinet FortiDeceptor
-
An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be abl…
- Fortinet FortiDeceptor