Known vulnerabilities in Fireware OS - page 3

Vendor: WatchGuard
Software: Fireware OS
Software CPE: cpe:2.3:o:watchguard:fireware_os:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 3
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fireware OS Fireware OS is affected by 56 known vulnerabilities: 3 critical, 4 high, 9 medium, 40 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119996 - Improper Access Control
CVE-2022-25363
CWE-284 Medium
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119995 - Unrestricted Upload of File with Dangerous Type
CVE-2022-25360
CWE-434 Medium
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119994 - Stack-based buffer overflow
CVE-2022-25293
CWE-121 Medium
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119993 - Stack-based buffer overflow
CVE-2022-25292
CWE-121 Medium
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119992 - Integer overflow
CVE-2022-25291
CWE-190 Medium
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119991 - Permissions, Privileges, and Access Controls
CVE-2022-25290
CWE-264 High
No
No
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU119990 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26318
CWE-78 Critical
Available
Exploited
12.1.3 Update 8, 12.5.9 Update 2, 12.7.2 Update 2 16.12.2025 SB2022030458
#VU112912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6947
CWE-79 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112911 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6946
CWE-79 Low
No
No
12.11.3 15.07.2025 SB2025071544
#VU112871 - Hidden Functionality (Backdoor)
CVE-2025-4106
CWE-912 Low
No
No
12.11.3 14.07.2025 SB2025071417
#VU107929 - Improper input validation
CVE-2025-0178
CWE-20 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1239
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU107927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1071
CWE-79 Low
No
No
12.11.1 24.04.2025 SB2025042484
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Available
No
12.11.3 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU8533 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
- 20.09.2017 -
#VU8532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 20.09.2017 -


Showing elements 41 - 60 out of 56