CVE-2025-1239

published 2025-02-14

CVE-2025-1239: A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An…

Priority P4 22 medium 4.8 CVSS 4.0

AV N AC L AT N PR H UI P VC N VI N VA N SC L SI L SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
watchguard	fireware_os	>= 12.0 < 12.11.1	12.11.1
watchguard	fireware_os	>= 12.0 < 12.5.13	12.5.13

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79