CVE-2024-45326lowCWE-284

CVE-2024-45326: low-severity vulnerability in Fortinet FortiDeceptor

Published · Updated

Follow this CVE+ Monitor FortiDeceptor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.9epss 0.3%
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
Affected products
Fortinet · FortiDeceptor
Related CVEs — Fortinet FortiDeceptor

In the same product, most dangerous first.

CVE-2023-26209LOWCVE-2023-26209EPSS 1.7%CVE-2022-27487HIGHCVE-2022-27487EPSS 1.0%CVE-2022-30305LOWCVE-2022-30305EPSS 0.7%CVE-2026-25689MEDIUMCVE-2026-25689EPSS 0.6%CVE-2024-35280MEDIUMCVE-2024-35280EPSS 0.3%CVE-2026-25690MEDIUMCVE-2026-25690EPSS 0.2%