153 matches found
CVE-2022-33874
An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the...
PT-2022-4989 · Fortinet · Fortitester
Name of the Vulnerable Software and Affected Versions: FortiTester versions 2.3.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0 Description: The issue is related to an improper neutralization of special elements used in an OS Command, which may...
CVE-2022-33872
The CVE-2022-33872 entry concerns FortiTester Telnet login components with an OS Command Injection (CWE-78) flaw. Affected versions include FortiTester 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0. The vulnerability allows an unauthenticated remote attacker to execute arbitrary commands in the under...
CVE-2022-33873
CVE-2022-33873 describes an OS command injection in FortiTester Console login components due to improper neutralization of special elements. Affected FortiTester versions: 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0. Unauthenticated attackers could execute arbitrary commands in the underlying shell...
PT-2022-5028 · Fortinet · Fortitester
Name of the Vulnerable Software and Affected Versions: FortiTester versions 2.3.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0 Description: The issue is related to an improper restriction of excessive authentication attempts, which may allow an...
CVE-2022-35846
The CVE-2022-35846 entry covers FortiTester with a flaw in the Telnet port that allows brute-force credential guessing for the admin user due to an improper restriction of excessive authentication attempts. Affected FortiTester versions are 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0. The core issu...
CVE-2020-12815
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields...
CVE-2020-12815
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields...
Input validation
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields...
CVE-2020-12815
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields...
CVE-2020-12815
FortiTester is affected by CVE-2020-12815 due to improper neutralization of input, enabling a remote authenticated attacker to inject HTML/script via IPv4/IPv6 address fields in versions prior to 3.9.0. The issue is documented across multiple sources (NVD, Red Hat CVE listing, and Fortinet adviso...
