CVE-2025-6946

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-6946
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.

4.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://psirt.watchguard.com/CVE-2025-6946
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00011 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*
cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*
History

25 Sep 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web (XSS o 'cross-site scripting') vulnerabilidad en WatchGuard Fireware OS permite XSS almacenado a través del módulo IPS. Esta vulnerabilidad requiere una sesión de administrador autenticada a un Firebox administrado localmente. Este problema afecta a Firebox: desde 12.0 hasta 12.11.2.
Information

Published : 2025-12-04 22:15

Updated : 2026-09-25 23:10

NVD link : CVE-2025-6946

Mitre link : CVE-2025-6946

CVE.ORG link : CVE-2025-6946

JSON object : View

Products Affected

watchguard

  • firebox_m270
  • firebox_m5800
  • firebox_m4600
  • firebox_t80
  • firebox_m370
  • fireware
  • firebox_m470
  • firebox_t25
  • firebox_nv5
  • firebox_m590
  • firebox_t20
  • firebox_t85
  • firebox_m290
  • firebox_t70
  • firebox_t55
  • firebox_m5600
  • firebox_t40
  • fireboxcloud
  • firebox_m4800
  • firebox_m670
  • firebox_m570
  • firebox_t35
  • firebox_m690
  • fireboxv
  • firebox_t45
  • firebox_m390
  • firebox_m440
  • firebox_t15
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')