Fortinet FortiDeceptor
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-25690 | 6.0.0 – 6.0.2 ; 5.3.0 – 5.3.3 ; 5.2.0 – 5.2.1 ; … | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-25689 | 6.2.0 ; 6.0.0 – 6.0.3 ; 5.3.0 – 5.3.4 ; … | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDe | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-35280 | 5.3.0 ; 5.2.0 ; 5.1.0 ; … | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDeceptor 5.3.0, FortiD | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-45326 | 6.0.0 ; 5.3.0 – 5.3.4 ; 5.2.0 – 5.2.2 ; … | An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDecep | MEDIUM 4.3 | 0.3 % | ||
| CVE-2022-27487 | 4.1.0 ; 4.0.0 – 4.0.2 ; 3.3.0 – 3.3.3 ; … | A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor | HIGH 8.8 | 1.0 % | ||
| CVE-2023-26209 | 3.1.0 – 3.1.1 ; 3.0.0 – 3.0.2 ; 2.1.0 ; … | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a rem | MEDIUM 5.3 | 1.7 % | ||
| CVE-2022-30305 | 4.2.0 ; 4.1.0 – 4.1.1 ; 4.0.0 – 4.0.2 ; … | An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor | HIGH 7.5 | 0.7 % |