8.6
High
CVE-2022-41335 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…
Description
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, FortiSwitchManager 7.2.0 and before 7.0.0 allows an authenticated attacker to read and write files on the underlying Linux system via crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitchManager | 7.2.0 | No fix stated |
| FortiSwitchManager | 7.0.0 | No fix stated |
| FortiOS 7.2 | 7.2.0 → 7.2.2 | No fix stated |
| FortiOS 7.0 | 7.0.0 → 7.0.8 | No fix stated |
| FortiOS 6.4 | 6.4.0 → 6.4.11 | No fix stated |
| FortiOS 6.2 | 6.2.0 → 6.2.12 | No fix stated |
| FortiProxy 7.2 | 7.2.0 → 7.2.1 | No fix stated |
| FortiProxy 7.0 | 7.0.0 → 7.0.7 | No fix stated |
| FortiProxy 2.0 | 2.0.0 → 2.0.11 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiProxy 1.2 | 1.2.0 → latest | No fix stated |
| FortiProxy 1.1 | 1.1.0 → latest | No fix stated |
| FortiProxy 1.0 | 1.0.0 → latest | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitchManager
The 20 CVEs of FortiSwitchManager →
CVE-2026-59840
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
4.1
Medium
CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
5.4
Medium
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
7.4
High
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.1
Critical