WatchGuard Fireware OS
Moderate fix1 remedy
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 12.0, <= 12.11.1
WatchGuard Fireware OS Stored Cross-Site Scripting Vulnerability
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in WatchGuard Fireware OS versions 12.0 through 12.11.1. This vulnerability exists in the management interface of Firebox appliances, specifically within the Access Portal configuration. It allows an authenticated administrator to inject and execute arbitrary JavaScript code in the management interface of other users.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user accessing the Firebox management interface.
Remediation
This vulnerability has been resolved in Fireware OS 12.11.2.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
1.7exploitability
4.1remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.