Fortinet FortiSwitch
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-106175 | 7.6.0 – 7.6.6 ; 7.4.0 – 7.4.10 ; 7.2.0 – 7.2.10 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versi | LOW 2.3 | 0.1 % | ||
| CVE-2024-48887 | 7.6.0 ; 7.4.0 – 7.4.4 ; 7.2.0 – 7.2.8 ; … | A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin password | CRITICAL 9.8 | 16 % | ||
| CVE-2022-23439 | | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafte | MEDIUM 6.1 | 0.5 % | ||
| CVE-2023-37937 | 7.4.0 ; 7.2.0 – 7.2.5 ; 7.0.0 – 7.0.7 ; … | An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2. | HIGH 7.8 | 0.5 % | ||
| CVE-2023-37936 | 7.4.0 ; 7.2.0 – 7.2.5 ; 7.0.0 – 7.0.7 ; … | A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 throug | CRITICAL 9.8 | 1.0 % | ||
| CVE-2022-27488 | 7.0.0 – 7.0.4 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.8 ; … | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 th | HIGH 8.8 | 0.5 % | ||
| CVE-2022-27490 | 7.0.0 – 7.0.4 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.7 ; … | A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0 | MEDIUM 6.5 | 0.5 % | ||
| CVE-2021-43074 | 7.0.0 – 7.0.3 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.7 ; … | An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions | MEDIUM 4.3 | 0.3 % | ||
| CVE-2021-42757 | | A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated l | MEDIUM 6.7 | 0.5 % |