# Fortinet FortiTester. Every CVE that names Fortinet FortiTester among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Information disclosure in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2024-47569.md) `CVE-2024-47569` · CVE record: Fortinet FortiManager and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Information disclosure - [A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the \`Host\` header points to an arbitr…](https://agentprime.io/advisories/CVE-2022-23439.md) `CVE-2022-23439` · CVE record: Fortinet FortiTester and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 22 Jan 2025 · Tags: CWE-610 - [OS command injection in Fortinet FortiTester](https://agentprime.io/advisories/CVE-2023-40716.md) `CVE-2023-40716` · CVE record: Fortinet FortiTester · CVSS 6.5 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: Command injection - [Cleartext storage of sensitive information in Fortinet FortiTester](https://agentprime.io/advisories/CVE-2023-40715.md) `CVE-2023-40715` · CVE record: Fortinet FortiTester · CVSS 5.2 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Information disclosure - [Hard-coded credentials in Fortinet FortiTester](https://agentprime.io/advisories/CVE-2023-40717.md) `CVE-2023-40717` · CVE record: Fortinet FortiTester · CVSS 5.0 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Hard-coded credentials - [Command injection in Fortinet FortiTester](https://agentprime.io/advisories/CVE-2023-36642.md) `CVE-2023-36642` · CVE record: Fortinet FortiTester · CVSS 6.5 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Command injection - [OS command injection in Fortinet FortiTester](https://agentprime.io/advisories/CVE-2022-35845.md) `CVE-2022-35845` · CVE record: Fortinet FortiTester · CVSS 7.6 High · Not analysed yet · Published 3 Jan 2023 · Tags: Command injection - [A hidden functionality vulnerability \[CWE-1242\] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the devic…](https://agentprime.io/advisories/CVE-2022-38372.md) `CVE-2022-38372` · CVE record: Fortinet Fortinet FortiTester · CVSS 6.7 Medium · Not analysed yet · Published 2 Nov 2022 - [An improper neutralization of special elements used in an OS command vulnerability \[CWE-78\] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.…](https://agentprime.io/advisories/CVE-2022-33870.md) `CVE-2022-33870` · CVE record: Fortinet Fortinet FortiTester · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2022 - [An improper restriction of excessive authentication attempts vulnerability \[CWE-307\] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthentica…](https://agentprime.io/advisories/CVE-2022-35846.md) `CVE-2022-35846` · CVE record: Fortinet Fortinet FortiTester · CVSS 8.1 High · Not analysed yet · Published 10 Oct 2022 - [An improper neutralization of special elements used in an OS command vulnerability \[CWE-78\] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 ma…](https://agentprime.io/advisories/CVE-2022-35844.md) `CVE-2022-35844` · CVE record: Fortinet Fortinet FortiTester · CVSS 6.7 Medium · Not analysed yet · Published 10 Oct 2022 - [An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities \[CWE-78\] in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0,…](https://agentprime.io/advisories/CVE-2022-33874.md) `CVE-2022-33874` · CVE record: Fortinet Fortinet FortiTester · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2022 - [An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities \[CWE-78\] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.…](https://agentprime.io/advisories/CVE-2022-33873.md) `CVE-2022-33873` · CVE record: Fortinet Fortinet FortiTester · CVSS 6.8 Medium · Not analysed yet · Published 10 Oct 2022 - [An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities \[CWE-78\] in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2…](https://agentprime.io/advisories/CVE-2022-33872.md) `CVE-2022-33872` · CVE record: Fortinet Fortinet FortiTester · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2022 - [An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.](https://agentprime.io/advisories/CVE-2020-12815.md) `CVE-2020-12815` · CVE record: Fortinet Fortinet FortiTester · No CVSS score · Not analysed yet · Published 24 Sept 2020 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .