Known vulnerabilities in Fireware OS 12.1.3 Update 5 - page 2
Vendor:
WatchGuard
Software:
Fireware OS
Version:
12.1.3 Update 5
Software CPE:
cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Website:
https://www.watchguard.com/
Total vulnerabilities:
40
Public exploits:
2
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
12.5.19
2026.2.1
12.12.1
2026.3
2026.2
12.12
12.5.18
12.5.17
12.11.8
2026.1.2
2026.1.1
12.11.7
12.5.16
2026.1
12.3.1 Update 4
12.5.15
12.11.6
2025.1.4
12.7.2 Update 3
2025.1.3
12.11.5
12.5.14
2025.1.2
12.11.1
2025.1.1
2025.1
12.11.4
12.11.1 Update 1
12.11
12.10.4 Update 2
12.10.4 Update 1
12.10.4
12.10.3
12.10.2
12.10.1 Update 1
12.10.1
12.10
12.9.4
12.9.3
12.9.2
12.9 Update 1
12.9
12.8.3
12.8.2 Update 1
12.8.2
12.8.1
12.8 Update 1
12.8
12.7.2 Update 2
12.7.2 Update 1
12.7.2
12.7.1
12.7 Update 1
12.7
12.6.4
12.6.3
12.6.2 Update 3
12.6.2 Update 2
12.6.2 Update 1
12.6.2
12.6.1 Update 1
12.6.1
12.6
12.5.13
12.5.12 Update 2
12.5.12 Update 1
12.5.12
12.5.11
12.5.10
12.5.9 Update 2
12.5.9 Update 1
12.5.9
12.5.8
12.5.7 Update 3
12.5.7 Update 2
12.5.7 Update 1
12.5.7
12.5.6
12.5.5 Update 1
12.5.5
12.5.4
12.5.3 Update 1
12.5.3
12.5.2 Update 1
12.5.2
12.5.1 Update 1
12.5.1
12.5 Update 1
12.5
12.4.1 Update 1
12.4.1
12.4 Update 2
12.4 Update 1
12.4
12.3.1 Update 3
12.3.1 Update 2
12.3.1 Update 1
12.3.1
12.3 Update 1
12.3
12.2.1
12.2
12.1.4
12.1.3 Update 8
12.1.3 Update 7
12.1.3 Update 6
12.1.3 Update 5
12.1.3 Update 4
12.1.3 Update 3
12.1.3 Update 2
12.1.3 Update 1
12.1.3
12.1.2
12.1.1
12.1
12.0.2
12.0.1
11.12.4 Update 1
11.12.4
11.12.3
11.12.2 Update 1
11.12.2
11.12.1
11.12 Update 1
11.12
11.11.4 Update 2
11.11.4 Update 1
11.11.4
11.11.3
11.11.2
11.11.1
11.11
11.10.7 Update 1
11.10.7
11.10.6
11.10.5
11.10.4
11.10.3 Update 1
11.10.3
11.10.2 Update 2
11.10.2 Update 1
11.10.2
11.10.1
11.10
11.9.6 Update 1
11.9.6
11.9.5
11.9.4 Update 1
11.9.4
11.9.3
11.9.2
11.9.1
11.9
11.8.4
11.8.3 Update 1
11.8.3
11.8.1
11.8
11.7.5
11.7.3 Update 1
11.7.3
11.7.2 Update 1
11.7.2
11.7.1
11.7
11.6.8
11.6.7
11.6.6
11.6.5
11.6.3
11.6.1
11.6
11.5.4
11.5.3
11.5.2 Update 1
11.5.2
11.5.1
11.5
11.4.2
11.4.1
11.4
11.3.2
11.3
12.11.3
12.11.2
12.0
-
Vulnerabilities (40)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119996 - Improper Access Control CVE-2022-25363 |
CWE-284 | Medium | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119995 - Unrestricted Upload of File with Dangerous Type CVE-2022-25360 |
CWE-434 | Medium | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119994 - Stack-based buffer overflow CVE-2022-25293 |
CWE-121 | Medium | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119993 - Stack-based buffer overflow CVE-2022-25292 |
CWE-121 | Medium | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119992 - Integer overflow CVE-2022-25291 |
CWE-190 | Medium | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119991 - Permissions, Privileges, and Access Controls CVE-2022-25290 |
CWE-264 | High | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119990 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-26318 |
CWE-78 | Critical | 12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 | 16.12.2025 |
SB2022030458 |
||
| #VU119382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-13939 |
CWE-79 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119380 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-13937 |
CWE-79 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-13936 |
CWE-79 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119378 - Out-of-bounds write CVE-2025-12196 |
CWE-787 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119377 - Out-of-bounds write CVE-2025-12195 |
CWE-787 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119375 - Out-of-bounds write CVE-2025-12026 |
CWE-787 | Low | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU119374 - Improper Neutralization of Data within XPath Expressions CVE-2025-1545 |
CWE-643 | Medium | 12.5.14, 12.11.5, 2025.1.3 | 08.12.2025 |
SB20251208134 |
||
| #VU116009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-4805 |
CWE-79 | Low | 12.11.2 | 22.09.2025 |
SB2025092280 |
||
| #VU116008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-4804 |
CWE-79 | Low | 12.11.2 | 22.09.2025 |
SB2025092280 |
||
| #VU115852 - Out-of-bounds write CVE-2025-9242 |
CWE-787 | Critical | 12.3.1 Update 3, 12.5.13, 12.11.4, 2025.1.1 | 19.09.2025 |
SB2025091929 |
||
| #VU107929 - Improper input validation CVE-2025-0178 |
CWE-20 | Low | 12.11.1 | 24.04.2025 |
SB2025042484 |
||
| #VU107928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-1239 |
CWE-79 | Low | 12.11.1 | 24.04.2025 |
SB2025042484 |
||
| #VU107927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-1071 |
CWE-79 | Low | 12.11.1 | 24.04.2025 |
SB2025042484 |
Showing elements 21 - 40 out of 40