CVE-2025-6946 - WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration

Back Back to CVE browser

MEDIUM

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration

Published Dec 4, 2025

4.8

MEDIUM

CVSS 4.0

EPSS 0.24%

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.

Affected products

Vendor WatchGuard Product Fireware OS Default
unaffected
- Version
  12.0
  Status
  affected
  Constraints
  <12.11.3
- Version
  12.0
  Status
  affected
  Constraints
  <12.5.13

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WatchGuard

Fireware OS

unaffected

Version	Status	Constraints
12.0	affected	<12.11.3
12.0	affected	<12.5.13

Remediation

Vendor solution

Fireware OS 12.11.3, Fireware OS 12.5.13

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-201296
Advisory
https://psirt.watchguard.com/CVE-2025-6946
vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00011
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-201296		Advisory
https://psirt.watchguard.com/CVE-2025-6946		vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00011		vendor-advisoryVendor Advisory