WatchGuard Fireware OS
Moderate fix1 remedy
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 12.0, <= 12.5.12+701324
- >= 12.6, <= 12.11
WatchGuard Fireware OS Stored Cross-Site Scripting Vulnerability in SpamBlocker Module
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in WatchGuard Fireware OS versions 12.0 prior to 12.5.12+701324 and 12.6 prior to 12.11. This vulnerability allows an authenticated administrator to inject and execute arbitrary JavaScript in the management interface, potentially affecting other users.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user accessing the Firebox management interface.
Remediation
This vulnerability has been resolved in Fireware OS 12.11.1.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.7exploitability
4.1remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.