CVE-2022-38373

CVE-2022-38373 affects Fortinet FortiDeceptor management interface versions 4.0.2, 4.1.0–4.1.1, and 4.2.0. The issue is an improper neutralization of input during web page generation, enabling a cross-site scripting (XSS) attack by an authenticated user sending requests with a specially crafted l...

CVE-2022-30302

FortiDeceptor management interface (versions 1.0.0–3.2.x, 3.3.0–3.3.2, 4.0.0–4.0.1) is affected by CVE-2022-30302 due to a path traversal issue (input validation) that could allow a remote, authenticated attacker to retrieve and delete arbitrary files on the underlying filesystem via specially cr...

CVE-2022-27487

The CVE-2022-27487 entry concerns Fortinet FortiSandbox and FortiDeceptor products with an improper privilege management flaw that allows a remote authenticated attacker to perform unauthorized API calls via crafted HTTP/HTTPS requests. Affected: FortiSandbox versions 4.2.0–4.2.2, 4.0.0–4.0.2, an...

CVE-2022-30305

CVE-2022-30305 describes an insufficient logging flaw (CWE-778) in FortiSandbox and FortiDeceptor products that could allow a remote attacker to repeatedly enter incorrect credentials without generating log entries and with no limit on failed attempts. Affected: FortiSandbox versions 3.1.0–4.0.2 ...

CVE-2020-29017

CVE-2020-29017 is an OS command injection vulnerability in FortiDeceptor (versions 3.1.0, 3.0.1, 3.0.0) that lets an authenticated remote attacker execute arbitrary commands on the system. The root cause is a command injection on the Customization page of the FortiDeceptor management interface. E...

CVE-2024-35280

CVE-2024-35280 describes a cross-site scripting vulnerability in Fortinet FortiDeceptor, affecting versions 3.x through 5.3.0. The issue stems from improper neutralization of input during web page generation, allowing a reflected XSS in recovery endpoints. Public details are corroborated across m...

CVE-2024-45326

CVE-2024-45326 describes an Improper Access Control (CWE-284) vulnerability in Fortinet FortiDeceptor affecting FortiDeceptor 6.0.0 and all 5.x releases (5.3, 5.2, 5.1, 5.0). An authenticated attacker with no privileges can perform operations on the central management appliance by crafting reques...

CVE-2023-26209

CVE-2023-26209 affects Fortinet FortiDeceptor 3.1.x and earlier. The issue is an improper restriction of excessive authentication attempts (CWE-307) that allows a remote unauthenticated attacker to partially exhaust CPU and memory by sending numerous HTTP requests to the login form. Exploitation ...

CVE-2020-6644

FortiDeceptor 3.0.0 and earlier suffer an insufficient session expiration vulnerability: an attacker who obtains an unexpired admin session ID can reuse it to gain admin privileges after logout. The connected sources confirm the affected product and the root cause (unexpired session IDs) but do n...

CVE-2026-25690

CVE-2026-25690 affects Fortinet FortiDeceptor 6.0.0–6.0.2, 5.3.0–5.3.3, 5.2.0–5.2.1, and all 5.1/5.0 versions. It results from improper neutralization of argument delimiters in a command (argument injection). An authenticated attacker with at least read-only admin privileges can read log files vi...

CVE-2026-25689

CVE-2026-25689 is a Fortinet FortiDeceptor issue: an improper neutralization of argument delimiters in a command (argument injection) vulnerability that could let a privileged attacker with super-admin/CLI access delete sensitive files via crafted HTTP requests. Affected versions include FortiDec...