Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*

part: a version: 7.2.4 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiswitch (38edcec5-b3e9-54ce-b2d7-f05127361efd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48887 vulnerable 2026-06-08 06:50:11.561040 Details available
CRITICAL (9.3)
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
Published: 2025-04-08T16:52:02.152Z
Updated: 2026-02-26T18:28:37.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37937 vulnerable 2026-06-08 06:08:16.460236 Details available
HIGH (7.6)
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI.
Published: 2025-01-14T14:09:30.314Z
Updated: 2025-01-14T20:55:14.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37936 vulnerable 2026-06-08 06:08:16.426331 Details available
CRITICAL (9.6)
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.
Published: 2025-01-14T14:09:30.417Z
Updated: 2025-01-14T20:55:06.579Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.