Fortinet Fortinet FortiDeceptor
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-38373 | FortiDeceptor 4.2.0, 4.1.0 through 4.1.1, 4.0.2 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 thr | HIGH 8.0 | 0.5 % | ||
| CVE-2022-30302 | FortiDeceptor 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4. | HIGH 8.1 | 0.9 % | ||
| CVE-2020-6644 | 3.0.0 and below ; Fixed in 3.0.1 | An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user sessi | HIGH 8.1 | 1.0 % |