6.9
Medium
CVE-2023-36635 An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a…
Description
An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitchManager 7.2 | 7.2.0 → 7.2.2 | No fix stated |
| FortiSwitchManager 7.0 | 7.0.0 → 7.0.1 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitchManager
The 20 CVEs of FortiSwitchManager →
CVE-2026-59840
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
4.1
Medium
CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
5.4
Medium
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
7.4
High
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.1
Critical