CVE-2025-4805

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.1

Description A stored cross-site scripting (XSS) issue exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. This occurs due to improper neutralization of input during web page generation. An authenticated remote attacker with administrator privileges can exploit this to execute arbitrary JavaScript code within the management interface of another administrative user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.