CVE-2025-6946

MEDIUM EPSS 4.7%
Published Dec 4, 20256mo ago · Modified Jun 17, 20261w ago
4.8 CVSS 4.0
Medium
Find Similar
Published Dec 4, 2025 6mo ago
Last Modified Jun 17, 2026 1w ago

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the IPS module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Firebox: from 12.0 through 12.11.2.

CVSS Details

Base Score
4.8
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction P
Scope X

Threat Intelligence

EPSS Exploit Probability
4.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 29

VendorProductVersionRange
watchguardfireware*≥12.0.0  –  <12.11.3
watchguardfirebox_m270*any
watchguardfirebox_m290*any
watchguardfirebox_m370*any
watchguardfirebox_m390*any
watchguardfirebox_m440*any
watchguardfirebox_m4600*any
watchguardfirebox_m470*any
watchguardfirebox_m4800*any
watchguardfirebox_m5600*any
watchguardfirebox_m570*any
watchguardfirebox_m5800*any
watchguardfirebox_m590*any
watchguardfirebox_m670*any
watchguardfirebox_m690*any
watchguardfirebox_nv5*any
watchguardfirebox_t20*any
watchguardfirebox_t25*any
watchguardfirebox_t40*any
watchguardfirebox_t45*any
watchguardfirebox_t55*any
watchguardfirebox_t70*any
watchguardfirebox_t80*any
watchguardfirebox_t85*any
watchguardfireboxcloud*any
watchguardfireboxv*any
watchguardfireware*≥12.5  –  <12.5.13
watchguardfirebox_t15*any
watchguardfirebox_t35*any

References 1

  • watchguard.com https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00011
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.