VULNERABILITY INTELLIGENCE
CVE-2025-4804
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-05-16
Last modified2026-08-08
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.
Weakness classification
- 5d1c2695-1a31-4499-88ae-e847036fd7e3: CWE-79