Fortinet Fortinet FortiTester

Name: Fortinet Fortinet FortiTester
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical2high2medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-33874US	critical9.8	3.02% (87th)	—	no fix	2022-10-18	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-33872US	critical9.8	3.02% (87th)	—	no fix	2022-10-18	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-33873US	critical9.8	2.66% (86th)	—	no fix	2022-10-18	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-35846US	critical9.8	0.91% (60th)	—	no fix	2022-10-18	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2020-12815US	medium5.4	0.85% (58th)	—	no fix	2020-09-24	≤ FortiTester before 3.9.0
CVE-2022-33870US	high7.8	0.45% (39th)	—	no fix	2022-11-02	≤ FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-35844US	high7.2	0.36% (29th)	—	no fix	2022-10-18	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
CVE-2022-38372US	medium6.7	0.19% (8th)	—	no fix	2022-11-02	≤ FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-1242Inclusion of Undocumented Features or Chicken Bits1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.