Known vulnerabilities in Fireware OS 12.3 Update 1 - page 2

Vendor: WatchGuard
Software: Fireware OS
Version: 12.3 Update 1
Software CPE: cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fireware OS version 12.3 Update 1 Fireware OS 12.3 Update 1 is affected by 33 vulnerabilities: 2 critical, 3 high, 2 medium, 26 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13939
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13938
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119380 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13937
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13936
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119378 - Out-of-bounds write
CVE-2025-12196
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119377 - Out-of-bounds write
CVE-2025-12195
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119375 - Out-of-bounds write
CVE-2025-12026
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU116009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4805
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU116008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4804
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU115852 - Out-of-bounds write
CVE-2025-9242
CWE-787 Critical
Public exploit available
Exploited
12.3.1 Update 3, 12.5.13, 12.11.4, 2025.1.1 19.09.2025 SB2025091929
#VU107929 - Improper input validation
CVE-2025-0178
CWE-20 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1239
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1071
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484


Showing elements 21 - 40 out of 33