Skip to content
OpenAdvisories
Medium WID-SEC-2025-0376 3 CVEs

WatchGuard Firebox: Mehrere Schwachstellen

Published Feb 13, 2025 · Updated Feb 13, 2025 · de-DE

Vendor: WatchGuard Product: Firebox

Summary

Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.

Product

WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Vulnerabilities 3

  • Medium 5.1
    CVE-2025-0178

    WatchGaurd Firebox Host Header Injection Vulnerability

    An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malic…

    WatchGuard Fireware OS
  • Medium 4.8
    CVE-2025-1071

    WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module

    A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitr…

    WatchGuard Fireware OS
  • Medium 4.8
    CVE-2025-1239

    WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List

    A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitr…

    WatchGuard Fireware OS

Revision history

  1. #1

    Initiale Fassung

References