CPE Details
Fortinet FortiDeceptor 3.3.3
3.3.3
2023-04-17
14h28 +00:00
14h28 +00:00
2023-05-11
15h45 +00:00
15h45 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:fortinet:fortideceptor:3.3.3:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortideceptorVersion
3.3.3Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiDeceptor 3.x all versions, 4.x all versions, 5.0 all versions, 5.1 all versions, version 5.2.0, and version 5.3.0 may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints | 6.1 |
Medium |
||
| An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts. | 7.5 |
High |
