medium6.1
CVE-2025-13938
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr…
Impact
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Fireware | from 2025.1 before 2025.1.3 from 12.0.0 before 12.11.5 from 12.5 before 12.5.14 |