Vulnerability Database

313,519

Total vulnerabilities in the database

CVE-2025-13938

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.

  • Published: Dec 4, 2025
  • Updated: Dec 11, 2025
  • CVE: CVE-2025-13938
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
watchguard / fireware 2025.1 2025.1.3
watchguard / fireware 12.0.0 12.11.5
watchguard / fireware 12.5 12.5.14