CVE-2023-36635

An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.27.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API.

CVE-2022-42474

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attac...