Known vulnerabilities in FortiDeceptor

Vendor: Fortinet, Inc
Software: FortiDeceptor
Software CPE: cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 13
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiDeceptor FortiDeceptor is affected by 13 known vulnerabilities: 1 high, 6 medium, 6 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131205 - Argument Injection or Modification
CVE-2026-25690		 CWE-88 Low
No
No
 6.1.0 12.05.2026 SB2026051298
#VU123725 - Argument Injection or Modification
CVE-2026-25689		 CWE-88 Low
No
No
 6.2.1 10.03.2026 SB2026031087
#VU107377 - Improper Access Control
CVE-2024-45326		 CWE-284 Low
No
No
 6.0.1 11.04.2025 SB2025041108
#VU107351 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35280		 CWE-79 Low
No
No
 5.2.1, 5.3.1 10.04.2025 SB2025041029
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 5.2.1, 5.3.2 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU75063 - Improper Access Control
CVE-2022-27487		 CWE-284 Medium
No
No
 3.3.3, 4.0.2, 4.1.1 13.04.2023 SB2023041317
#VU74994 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-29056		 CWE-307 Low
No
No
 3.2.0 12.04.2023 SB2023041203
#VU69938 - Insufficient Logging
CVE-2022-30305		 CWE-778 Medium
No
No
 4.3.0 06.12.2022 SB2022120632
SB2022120633
#VU68923 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38373		 CWE-79 Low
No
No
 4.0.3, 4.1.2, 4.2.1, 4.3.0 02.11.2022 SB2022110221
#VU64937 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-30302		 CWE-22 Medium
No
No
 3.3.3, 4.0.2, 4.1.0 05.07.2022 SB2022070534
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU49277 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-29017		 CWE-78 Medium
No
No
 3.0.2, 3.1.1 05.01.2021 SB2021010510
#VU29194 - Insufficient Session Expiration
CVE-2020-6644		 CWE-613 Medium
No
No
 3.1.0 22.06.2020 SB2020062212