SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2025-6946

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration.

MEDIUM 4.8EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.

CVSS 4.0
4.8 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
0.24% probability · 15th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
watchguard/fireware
Source
5d1c2695-1a31-4499-88ae-e847036fd7e3

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.