Medium severityNVD Advisory· Published May 16, 2025· Updated Apr 15, 2026
CVE-2025-4804
CVE-2025-4804
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through 12.11.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >=12.0, <=12.11.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.