Skip to content
OpenAdvisories
Unscored CVE-2022-31792 EUVD-2022-53183GHSA-68cf-8298-f8rx

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote…

Published Sep 6, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

References