CVE-2025-6946

Опубликовано: 04 дек. 2025

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the IPS module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.

This issue affects Firebox: from 12.0 through 12.11.2.

Ссылки

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00011
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 12.0.0 (включая) до 12.11.3 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*

Версия от 12.5 (включая) до 12.5.13 (исключая)

Одно из

cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*

cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.00028

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-rg89-p3mq-2mpq