Skip to content
OpenAdvisories
Medium WID-SEC-2025-1090 2 CVEs

WatchGuard Firebox: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published May 18, 2025 · Updated May 18, 2025 · de-DE

Vendor: WatchGuard Product: Firebox

Summary

Ein entfernter, authentisierter Angreifer mit Administratorrechten kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Vulnerabilities 2

  • Medium 4.8
    CVE-2025-4804

    WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally m…

    WatchGuard Fireware OS
  • Medium 4.8
    CVE-2025-4805

    WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration

    A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execu…

    WatchGuard Fireware OS

Revision history

  1. #1

    Initiale Fassung

References