5.1
Medium
CVE-2024-35280 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…
Description
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4.1 all versions, FortiDeceptor 4.0 all versions, FortiDeceptor 3.3 all versions, FortiDeceptor 3.2 all versions, FortiDeceptor 3.1 all versions, FortiDeceptor 3.0 all versions may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiDeceptor | 5.3.0 | No fix stated |
| FortiDeceptor | 5.2.0 | No fix stated |
| FortiDeceptor | 5.1.0 | No fix stated |
| FortiDeceptor | 5.0.0 | No fix stated |
| FortiDeceptor | 4.3.0 | No fix stated |
| FortiDeceptor | 4.2.0 | No fix stated |
| FortiDeceptor 4.1 | 4.1.0 → 4.1.1 | No fix stated |
| FortiDeceptor 4.0 | 4.0.0 → 4.0.2 | No fix stated |
| FortiDeceptor 3.3 | 3.3.0 → 3.3.3 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiDeceptor 3.2 | 3.2.0 → 3.2.2 | No fix stated |
| FortiDeceptor 3.1 | 3.1.0 → 3.1.1 | No fix stated |
| FortiDeceptor 3.0 | 3.0.0 → 3.0.2 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiDeceptor
The 7 CVEs of FortiDeceptor →
CVE-2026-25690
An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet…
4.0
Medium
CVE-2026-25689
An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet…
6.0
Medium
CVE-2024-45326
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3…
3.9
Low
CVE-2022-27487
A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before…
8.3
High