WatchGuard Fireware OS
Moderate fix1 remedy
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 12.0, <= 12.11.1
WatchGuard Fireware OS Stored Cross-Site Scripting Vulnerability in SpamBlocker Module
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in WatchGuard Fireware OS versions 12.0 through 12.11.1. This issue resides within the spamBlocker module and allows an authenticated administrator to inject malicious JavaScript that is executed in the context of another management user.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the affected user.
Remediation
Users can upgrade to Fireware OS 12.11.2 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.3exploitability
4.1remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.