5.3.0

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-15	CVE-2024-35280	Cross-site Scripting vulnerability in Fortinet Fortideceptor A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiDeceptor 3.x all versions, 4.x all versions, 5.0 all versions, 5.1 all versions, version 5.2.0, and version 5.3.0 may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints network low complexity fortinet CWE-79	6.1
2025-01-14	CVE-2024-45326	Unspecified vulnerability in Fortinet Fortideceptor An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3 and below, version 5.2.1 and below, version 5.1.0, version 5.0.0 may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests. network low complexity fortinet	4.3