Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: WatchGuard Fireware OS 12.11.5, 2025.1.3 Clear all filters
TI-2025-01331 CVE-2025-1545 · GHSA-pqq2-xhg5-jr2v

WatchGuard Firebox XPath Injection Vulnerability in Web CGI

Priority LOW 36

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00513 Published 2025-12-04 Fixed in 2025.1.3, 12.11.5 +1 CWE-91
TI-2025-12739 CVE-2025-13940 · GHSA-pw6w-rvw4-j57r

WatchGuard Firebox Boot Time System Integrity Check Bypass

Priority LOW 29

An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the Firebox from shutting down in the event of…

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00135 Published 2025-12-04 Fixed in 2025.1.3, 12.11.5 CWE-440
TI-2025-12736 CVE-2025-13937 · GHSA-mf5h-qhm4-74qx

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration

Priority LOW 21

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00212 Published 2025-12-04 Fixed in 2025.1.3, 12.11.5 +1 CWE-79