WatchGuard Fireware OS
Moderate fix1 remedy
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 12.0, <= 12.5.12+701324
- >= 12.6, <= 12.11
WatchGuard Fireware OS Stored Cross-Site Scripting Vulnerability in Blocked Sites List
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in WatchGuard Fireware OS. This issue allows an authenticated administrator to inject and execute arbitrary JavaScript in the management interface of another user. The vulnerability arises from improper input neutralization during web page generation, specifically via the Blocked Sites list. It affects Fireware OS versions 12.0 prior to 12.5.12+701324, as well as versions 12.6 through 12.11.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected management interface.
Remediation
Users can upgrade to Fireware OS 12.11.1 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.7exploitability
4.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.