Vulnerabilities CVE-2025-4805

CVE-2025-4805

Medium

Open

TLP:CLEAR

WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

Details

CVSS Score: 4.8
EPSS Score ⓘ: 0.51%

40.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Confidence: 90%
Published: May 16, 2025
Last Modified: Aug 8, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.