Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071. This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
Related CPE's
o
watchguard
fireware
3
References
Weaknesses
5d1c2695-1a31-4499-88ae-e847036fd7e3
Secondary
CWE-79
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
4.8 · Medium
Information
Source identifier
5d1c2695-1a31-4499-88ae-e847036fd7e3
Vulnerability status
Modified
Published
2026-07-03T00:16:51.497Z
3 months agoLast modified
2026-08-28T00:16:47.467Z
1 month ago