NetSight
medium6.1

CVE-2025-13936

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr…

Impact

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS.

Affected products

VendorProductAffected versions
WatchguardFireware
from 2025.1 before 2025.1.3
from 12.0.0 before 12.11.5
from 12.5 before 12.5.14

Weakness classification

References