Known vulnerabilities in Fireware OS - page 3

Vendor: WatchGuard
Software: Fireware OS
Software CPE: cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 3
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fireware OS Fireware OS is affected by 58 known vulnerabilities: 3 critical, 4 high, 10 medium, 41 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153116 - Deserialization of Untrusted Data
CVE-2026-13046
CWE-502 Medium
No
No
12.12.3, 2026.2.3, 2026.3.2 02.10.2026 SB2026100202
#VU153115 - Stack-based buffer overflow
CVE-2026-18145
CWE-121 Low
No
No
12.12.3, 2026.2.3, 2026.3.2 02.10.2026 SB2026100202
#VU119374 - Improper Neutralization of Data within XPath Expressions
CVE-2025-1545
CWE-643 Medium
No
No
12.5.14, 12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU119373 - Expected Behavior Violation
CVE-2025-13940
CWE-440 Low
No
No
12.11.5, 2025.1.3 08.12.2025 SB20251208134
#VU116009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4805
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU116008 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4804
CWE-79 Low
No
No
12.11.2 22.09.2025 SB2025092280
#VU115852 - Out-of-bounds write
CVE-2025-9242
CWE-787 Critical
Available
Exploited
12.3.1 Update 3, 12.5.13, 12.11.4, 2025.1.1 19.09.2025 SB2025091929
#VU112912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6947
CWE-79 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112911 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6946
CWE-79 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112910 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-6999
CWE-444 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112909 - Stack-based buffer overflow
CVE-2025-1547
CWE-121 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112871 - Hidden Functionality (Backdoor)
CVE-2025-4106
CWE-912 Low
No
No
12.11.3 14.07.2025 SB2025071417
#VU107929 - Improper input validation
CVE-2025-0178
CWE-20 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1239
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1071
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Available
No
12.11.3 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU8533 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
- 20.09.2017 SB2017092007
#VU8532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 20.09.2017 SB2017092007


Showing elements 41 - 60 out of 58