2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Default"],"product":"Fireware OS","vendor":"WatchGuard","versions":[{"lessThan":"12.11.1","status":"affected","version":"12.0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["T15/T35"],"product":"Fireware OS","vendor":"WatchGuard","versions":[{"lessThan":"12.5.13","status":"affected","version":"12.0","versionType":"custom"}]}],"source":"5d1c2695-1a31-4499-88ae-e847036fd7e3"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user."},{"lang":"es","value":"La vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web (XSS o \"Cross-site Scripting\") en WatchGuard Fireware OS permite XSS almacenado a través de la lista de sitios bloqueados. Esta vulnerabilidad requiere una sesión de administrador autenticada en un Firebox administrado localmente. Este problema afecta a los sistemas operativos Fireware: desde la versión 12.0 hasta la 12.5.12+701324, desde la versión 12.6 hasta la 12.11."}],"id":"CVE-2025-1239","lastModified":"2026-08-08T03:16:43.830","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"5d1c2695-1a31-4499-88ae-e847036fd7e3","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1239","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-14T14:02:35.988330Z","version":"2.0.3"}}]},"published":"2025-02-14T14:15:32.687","references":[{"source":"5d1c2695-1a31-4499-88ae-e847036fd7e3","url":"https://psirt.watchguard.com/CVE-2025-1239"},{"source":"5d1c2695-1a31-4499-88ae-e847036fd7e3","url":"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00002"}],"sourceIdentifier":"5d1c2695-1a31-4499-88ae-e847036fd7e3","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"5d1c2695-1a31-4499-88ae-e847036fd7e3","type":"Secondary"}]}
|