Known vulnerabilities in FortiTester

Vendor: Fortinet, Inc
Software: FortiTester
Software CPE: cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiTester FortiTester is affected by 14 known vulnerabilities: 2 high, 2 medium, 10 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117148 - Insertion of Sensitive Information Into Sent Data
CVE-2024-47569		 CWE-201 Low
No
No
 7.4.3 15.10.2025 SB2025101507
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 7.2.4, 7.3.3, 7.4.3 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84858 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-40716		 CWE-78 Low
No
No
 7.3.0 29.12.2023 SB2023122906
#VU81223 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36642		 CWE-78 Low
No
No
 7.3.0 27.09.2023 SB2023092716
#VU81222 - Cleartext Storage of Sensitive Information
CVE-2023-40715		 CWE-312 Low
No
No
 7.3.0 27.09.2023 SB2023092716
#VU81220 - Use of Hard-coded Credentials
CVE-2023-40717		 CWE-798 Low
No
No
 7.3.0 27.09.2023 SB2023092716
#VU70664 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-35845		 CWE-78 Medium
No
No
 3.9.2, 4.2.1, 7.1.1, 7.2.0 03.01.2023 SB2023010327
#VU68919 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-33870		 CWE-78 Low
No
No
 3.9.2, 4.2.1, 7.1.1, 7.2.0 02.11.2022 SB2022110216
#VU68918 - Hidden Functionality (Backdoor)
CVE-2022-38372		 CWE-912 Low
No
No
 3.9.2, 4.2.1, 7.1.1, 7.2.0 02.11.2022 SB2022110216
#VU68104 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-35846		 CWE-307 Medium
No
No
 3.9.2, 4.2.1, 7.1.1 10.10.2022 SB2022101027
#VU68103 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-35844		 CWE-78 Low
No
No
 3.9.2, 4.2.1, 7.1.1 10.10.2022 SB2022101027
#VU68102 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-33873		 CWE-78 High
No
No
 3.9.2, 4.2.1, 7.1.1 10.10.2022 SB2022101027
#VU46991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12817		 CWE-79 Low
No
No
 3.9.0 23.09.2020 SB2020092327
#VU46989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12815		 CWE-79 Low
No
No
 3.9.0 23.09.2020 SB2020092327