Servers and applications
CVE-2022-30305
An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no…
- Severity
- High 7.5
- Published
- 6 Dec 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 3 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Fortinet FortiSandboxServers and applications · cpe:a:fortinet:fortisandbox |
|