CVE-2022-30302: Fortinet Fortideceptor

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web requests.

Affected products

• Fortinet Fortideceptor: from 1.0.0, up to and including 3.2.2; from 3.3.0, up to and including 3.3.2; version 4.0.0 only; version 4.0.1 only

Published 2022-07-19. Last modified 2026-06-17.