Known vulnerabilities in Fireware OS - page 2

Vendor: WatchGuard
Software: Fireware OS
Software CPE: cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 3
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fireware OS Fireware OS is affected by 56 known vulnerabilities: 3 critical, 4 high, 9 medium, 40 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123434 - Improper Validation of Integrity Check Value
CVE-2026-3344
CWE-354 Low
No
No
12.5.17, 12.11.8, 2026.1.2 03.03.2026 SB2026030321
#VU123433 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-3343
CWE-79 Low
No
No
12.11.8, 2026.1.2 03.03.2026 SB2026030321
#VU123429 - Out-of-bounds write
CVE-2026-3342
CWE-787 Low
No
No
12.5.17, 12.11.8, 2026.1.2 03.03.2026 SB2026030321
#VU122143 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-1498
CWE-90 High
No
No
12.5.16, 12.11.7, 2026.1 30.01.2026 SB2026013018
#VU120206 - Out-of-bounds write
CVE-2025-14733
CWE-787 Critical
No
Exploited
12.3.1 Update 4, 12.5.15, 12.11.6, 2025.1.4 19.12.2025 SB2025121911
#VU119382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13939
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13938
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119380 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13937
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-13936
CWE-79 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119378 - Out-of-bounds write
CVE-2025-12196
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119377 - Out-of-bounds write
CVE-2025-12195
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119376 - Memory corruption
CVE-2025-11838
CWE-119 Medium
No
No
12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119375 - Out-of-bounds write
CVE-2025-12026
CWE-787 Low
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119374 - Improper Neutralization of Data within XPath Expressions
CVE-2025-1545
CWE-643 Medium
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119373 - Expected Behavior Violation
CVE-2025-13940
CWE-440 Low
No
No
12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU116009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4805
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU116008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4804
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU115852 - Out-of-bounds write
CVE-2025-9242
CWE-787 Critical
Available
Exploited
12.3.1 Update 3, 12.5.13, 12.11.4, 2025.1.1 19.09.2025 SB2025091929
#VU112910 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-6999
CWE-444 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112909 - Stack-based buffer overflow
CVE-2025-1547
CWE-121 Low
No
No
12.11.3 15.07.2025 SB2025071544


Showing elements 21 - 40 out of 56