The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.8Upgrade FortiProxy to 7.2.2Upgrade FortiProxy to 2.0.12Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Jun 12, 2023 |
| Fortinet Fortiswitchmanager | — | Upgrade FortiSwitchManager to 7.2.2Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.2 | Sep 30, 2026 | Jun 12, 2023 |
| Fortios | — | Upgrade FortiOS to 6.4.13Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.2.4Upgrade FortiOS to 7.0.10Upgrade FortiOS to 7.4.0 | Jun 19, 2023 | Jun 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub