CVE 4.8 MEDIUM

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration_CVE-2025-13938

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.

Basic Information

ID CVE-2025-13938
Source WatchGuard
Published Dec 4, 2025 at 21:47

Affected Product

Vendor WatchGuard
Product Fireware OS
Version 12.4
Affected Versions WatchGuard Fireware OS 12.4
WatchGuard Fireware OS 12.5
WatchGuard Fireware OS 2025.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.