VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Feb 14, 2025· Updated Aug 8, 2026

CVE-2025-1071

CVE-2025-1071

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WatchGuard/Fireware2 versions
    cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*range: >=12.0.0,<12.11.1
    • (no CPE)range: 12.0
  • WatchGuard/Fireboxllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.