[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhfmcr73Y2hrM9WI_f0WgaHJcpac6ETNllty1xWhTEQ4":3,"g5a-family:fortinet\u002Ffortiswitchmanager":169,"g5a-ex:fortinet\u002Ffortiswitchmanager@*":170},{"success":4,"data":5},true,{"product":6,"versions":49,"topVulnerabilitiesByEpss":65,"kevVulnerabilities":126,"seoMetadata":147,"meta":166},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":48},"fortinet","fortiswitchmanager",15,3,"2025-12-09",[13,17,22,24,26,28,30,32,34,36,38,40,42,44,46],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},"7.0.0",4,1,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"7.0.1",2,0,false,{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},"7.0.2",{"version":25,"cve_count":20,"kev_count":20,"has_kev":21},"7.0.3",{"version":27,"cve_count":20,"kev_count":20,"has_kev":21},"7.0.4",{"version":29,"cve_count":20,"kev_count":20,"has_kev":21},"7.0.5",{"version":31,"cve_count":20,"kev_count":20,"has_kev":21},"7.0.6",{"version":33,"cve_count":15,"kev_count":16,"has_kev":4},"7.2.0",{"version":35,"cve_count":19,"kev_count":20,"has_kev":21},"7.2.1",{"version":37,"cve_count":16,"kev_count":20,"has_kev":21},"7.2.2",{"version":39,"cve_count":20,"kev_count":20,"has_kev":21},"7.2.3",{"version":41,"cve_count":20,"kev_count":20,"has_kev":21},"7.2.4",{"version":43,"cve_count":16,"kev_count":20,"has_kev":21},"7.2.5",{"version":45,"cve_count":20,"kev_count":20,"has_kev":21},"7.2.6",{"version":47,"cve_count":20,"kev_count":20,"has_kev":21},"7.2.7","Fortiswitchmanager by Fortinet is a technology product with 15 tracked versions and 15 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},{"version":25,"cve_count":20,"kev_count":20,"has_kev":21},{"version":27,"cve_count":20,"kev_count":20,"has_kev":21},{"version":29,"cve_count":20,"kev_count":20,"has_kev":21},{"version":31,"cve_count":20,"kev_count":20,"has_kev":21},{"version":33,"cve_count":15,"kev_count":16,"has_kev":4},{"version":35,"cve_count":19,"kev_count":20,"has_kev":21},{"version":37,"cve_count":16,"kev_count":20,"has_kev":21},{"version":39,"cve_count":20,"kev_count":20,"has_kev":21},{"version":41,"cve_count":20,"kev_count":20,"has_kev":21},{"version":43,"cve_count":16,"kev_count":20,"has_kev":21},{"version":45,"cve_count":20,"kev_count":20,"has_kev":21},{"version":47,"cve_count":20,"kev_count":20,"has_kev":21},[66,74,78,83,90,95,100,106,113,120],{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":4,"epssScore":73},"CVE-2022-40684","An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","2022-10-18",9.8,"v3.1","Critical",0.99984,{"cveId":75,"description":76,"publishedDate":11,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":4,"epssScore":77},"CVE-2025-59718","A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.",0.68293,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":4,"epssScore":82},"CVE-2024-23113","A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-02-15",0.61725,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":71,"severity":88,"isKev":4,"epssScore":89},"CVE-2025-25249","A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets","2026-01-13",8.1,"High",0.03802,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":21,"epssScore":94},"CVE-2025-22252","A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass.","2025-05-28",0.00944,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":87,"cvssVersion":71,"severity":88,"isKev":21,"epssScore":99},"CVE-2022-41335","A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, FortiSwitchManager 7.2.0 and before 7.0.0  allows an authenticated attacker to read and write files on the underlying Linux system via crafted HTTP requests.","2023-02-16",0.00927,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":71,"severity":88,"isKev":21,"epssScore":105},"CVE-2024-26010","A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-06-11",7.5,0.00786,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":71,"severity":111,"isKev":21,"epssScore":112},"CVE-2023-45583","A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.2, FortiSwitchManager 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests.","2024-05-14",6.7,"Medium",0.00659,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":71,"severity":118,"isKev":21,"epssScore":119},"CVE-2022-42474","A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.","2023-06-13",2.7,"Low",0.00642,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":71,"severity":111,"isKev":21,"epssScore":125},"CVE-2024-26011","A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.","2024-11-12",5.3,0.00597,[127,132,137,142],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"severity":88,"isKev":4,"epssScore":89,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":130,"cisaRequiredAction":131},"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","2026-09-09","Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":75,"description":76,"publishedDate":11,"cvssScore":70,"severity":72,"isKev":4,"epssScore":77,"cisaVulnName":133,"cisaDateAdded":134,"cisaShortDescription":135,"cisaRequiredAction":136},"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","2025-12-16","Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":79,"description":80,"publishedDate":81,"cvssScore":70,"severity":72,"isKev":4,"epssScore":82,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":141},"Fortinet Multiple Products Format String Vulnerability","2024-10-09","Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"severity":72,"isKev":4,"epssScore":73,"cisaVulnName":143,"cisaDateAdded":144,"cisaShortDescription":145,"cisaRequiredAction":146},"Fortinet Multiple Products Authentication Bypass Vulnerability","2022-10-11","Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","Apply updates per vendor instructions.",{"title":148,"metaDescription":149,"keywords":150,"structuredData":151},"Fortiswitchmanager by Fortinet - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fortiswitchmanager by Fortinet covering 15 versions with 15 tracked vulnerabilities including 3 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fortiswitchmanager vulnerabilities, Fortiswitchmanager security, Fortiswitchmanager CVE, Fortinet Fortiswitchmanager, Fortiswitchmanager threat intelligence, Fortinet security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Fortiswitchmanager KEV, Fortiswitchmanager exploited vulnerabilities",{"@context":152,"@type":153,"name":154,"description":149,"url":155,"manufacturer":156,"applicationCategory":160,"softwareVersion":161,"mainEntity":162},"https:\u002F\u002Fschema.org","SoftwareApplication","Fortiswitchmanager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffortinet\u002Ffortiswitchmanager",{"@type":157,"name":158,"url":159},"Organization","Fortinet","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffortinet","Security Software","15 versions tracked",{"@type":163,"name":164,"description":165,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Fortiswitchmanager Security Vulnerabilities","Security vulnerabilities affecting Fortiswitchmanager by Fortinet",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":167,"apiVersion":168},"2026-10-19T16:15:43.772Z","3.0",[],{"rows":171,"total":15,"capped":21,"failed":20},[172,178,184,190],{"cveId":84,"name":128,"severity":88,"cvss":87,"added":129,"epss":89,"published":173,"ranges":174,"checked":4,"hits":177,"covers":21},"2026-01-13T17:15:56.91",[175,176],"7.0.0 to before 7.0.6","7.2.0 to before 7.2.7",[],{"cveId":75,"name":133,"severity":72,"cvss":70,"added":134,"epss":77,"published":179,"ranges":180,"checked":4,"hits":183,"covers":21},"2025-12-09T18:15:54.983",[181,182],"7.0.0 to 7.0.5","7.2.0 to 7.2.6",[],{"cveId":79,"name":138,"severity":72,"cvss":70,"added":139,"epss":82,"published":185,"ranges":186,"checked":4,"hits":189,"covers":21},"2024-02-15T14:15:46.503",[187,188],"7.0.0 to 7.0.3","7.2.0 to 7.2.3",[],{"cveId":67,"name":143,"severity":72,"cvss":70,"added":144,"epss":73,"published":191,"ranges":192,"checked":4,"hits":193,"covers":21},"2022-10-18T14:15:09.747",[14,33],[]]