GCVE - cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*

part: a version: 6.4.4 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortiswitch (`38edcec5-b3e9-54ce-b2d7-f05127361efd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-48887`	vulnerable	2026-06-08 06:50:11.589296	Details available CRITICAL (9.3) A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request Published: 2025-04-08T16:52:02.152Z Updated: 2026-02-26T18:28:37.512Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37937`	vulnerable	2026-06-08 06:08:16.461032	Details available HIGH (7.6) An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI. Published: 2025-01-14T14:09:30.314Z Updated: 2025-01-14T20:55:14.029Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37936`	vulnerable	2026-06-08 06:08:16.440603	Details available CRITICAL (9.6) A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests. Published: 2025-01-14T14:09:30.417Z Updated: 2025-01-14T20:55:06.579Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-260	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23439`	vulnerable	2026-06-08 05:40:57.468078	Details available MEDIUM (4.1) A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver Published: 2025-01-22T09:10:28.669Z Updated: 2026-01-14T13:06:07.365Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-494	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42757`	vulnerable	2026-06-08 05:35:22.793772	Details available MEDIUM (6.3) A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments. Published: 2021-12-08T11:01:11.000Z Updated: 2025-10-16T09:46:26.239Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-173	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.