CVE-2025-1071

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1071", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "state": "PUBLISHED", "assignerShortName": "WatchGuard", "dateReserved": "2025-02-05T22:05:32.462Z", "datePublished": "2025-02-14T13:20:48.780Z", "dateUpdated": "2026-08-07T23:44:33.928Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-07T23:44:33.928Z"}, "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module", "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user."}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.11.1"}], "defaultStatus": "unaffected", "platforms": ["Default"]}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "versionType": "custom", "lessThan": "12.5.13"}], "defaultStatus": "unaffected", "platforms": ["T15/T35"]}], "references": [{"url": "https://psirt.watchguard.com/CVE-2025-1071", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00001", "tags": ["vendor-advisory"]}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.11.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "12.0", "versionEndExcluding": "12.5.13"}]}]}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "baseScore": 4.8, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79", "type": "CWE", "cweId": "CWE-79"}]}], "solutions": [{"lang": "en", "value": "Fireware OS 12.11.1, Fireware OS 12.5.13"}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}], "timeline": [{"time": "2025-09-17T00:00:00.000Z", "lang": "en", "value": "Updated to add Fireware OS 12.5.13 as a resolved release"}], "datePublic": "2025-02-14T13:20:48.780Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-14T14:04:09.605821Z", "id": "CVE-2025-1071", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-14T14:05:47.670Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1071", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-14T14:04:09.605821Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-14T14:04:14.820Z"}}], "cna": {"title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module", "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}}], "affected": [{"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "lessThan": "12.11.1", "versionType": "custom"}], "platforms": ["Default"], "defaultStatus": "unaffected"}, {"vendor": "WatchGuard", "product": "Fireware OS", "versions": [{"status": "affected", "version": "12.0", "lessThan": "12.5.13", "versionType": "custom"}], "platforms": ["T15/T35"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."}], "timeline": [{"lang": "en", "time": "2025-09-17T00:00:00.000Z", "value": "Updated to add Fireware OS 12.5.13 as a resolved release"}], "solutions": [{"lang": "en", "value": "Fireware OS 12.11.1, Fireware OS 12.5.13"}], "datePublic": "2025-02-14T13:20:48.780Z", "references": [{"url": "https://psirt.watchguard.com/CVE-2025-1071", "tags": ["vendor-advisory"]}, {"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00001", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.11.1", "versionStartIncluding": "12.0"}, {"criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "12.5.13", "versionStartIncluding": "12.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "shortName": "WatchGuard", "dateUpdated": "2026-08-07T23:44:33.928Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1071", "state": "PUBLISHED", "dateUpdated": "2026-08-07T23:44:33.928Z", "dateReserved": "2025-02-05T22:05:32.462Z", "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "datePublished": "2025-02-14T13:20:48.780Z", "assignerShortName": "WatchGuard"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Default"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "12.11.1", "status": "affected", "version": "12.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["T15/T35"], "product": "Fireware OS", "vendor": "WatchGuard", "versions": [{"lessThan": "12.5.13", "status": "affected", "version": "12.0", "versionType": "custom"}]}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E58F8CC6-6030-4F42-814C-33377C9547FE", "versionEndExcluding": "12.11.1", "versionStartIncluding": "12.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*", "matchCriteriaId": "DB00A42A-2065-4914-80CA-981E62DEC2CC", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*", "matchCriteriaId": "5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*", "matchCriteriaId": "22AC145E-2F33-4C0D-AA78-080CEA1980AB", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*", "matchCriteriaId": "80F83640-57E7-4DF8-A201-E8D5722EF978", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*", "matchCriteriaId": "2F639188-7E3D-46B8-8443-5B1F32A3EC59", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB643AE5-6432-474F-BCF9-7A92B907EDE1", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*", "matchCriteriaId": "08FC5CE7-00F5-40C4-877F-78D3DF6B01DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*", "matchCriteriaId": "04B14406-F7EC-4573-8AF0-BCCBA9BD1A15", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D10EFE3-0342-4670-AC73-011D08A4CBEA", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*", "matchCriteriaId": "68953F7A-9037-4848-9F7B-FD8E798CB761", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*", "matchCriteriaId": "1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*", "matchCriteriaId": "413CB88D-9755-43BF-9D76-4252C7151A84", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*", "matchCriteriaId": "902C261B-AE76-4F2A-B660-2C069692E95D", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3781D2E-80EF-4F6C-BBC3-7570940A5EBF", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*", "matchCriteriaId": "1D5FBFA4-219F-49F8-BD2C-415A621F6ED6", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*", "matchCriteriaId": "157A59B2-F420-4203-92C4-412685C51893", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*", "matchCriteriaId": "FFD1036B-87F5-4523-B67C-0DE6E9AACE32", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*", "matchCriteriaId": "8050A99B-C106-422D-9497-5E7C79FB89E0", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F2A1048-7830-4CEB-B6D1-4A4F0C10580F", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*", "matchCriteriaId": "F97AE5A0-E6E5-46BD-B05D-98E4253773F7", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD55ABF8-7C3C-476C-9A04-C889F3D8A21E", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*", "matchCriteriaId": "9882123D-992F-4BDA-8EE0-433A3AF62B54", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D86B0B2-D05B-4361-A02A-C1FEE2F710DD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A9CA277E-9B7D-4816-A0DE-E9B94504C28A", "versionEndExcluding": "12.5.13", "versionStartIncluding": "12.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC78E84B-C17B-44C5-9427-5EF97B90A6EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*", "matchCriteriaId": "12FED793-9DF3-46BB-AA64-3B1934123616", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user."}, {"lang": "es", "value": "La vulnerabilidad de neutralizaci\u00f3n inadecuada de la entrada durante la generaci\u00f3n de p\u00e1ginas web (XSS o \"Cross-site Scripting\") en WatchGuard Fireware OS permite XSS almacenado a trav\u00e9s del m\u00f3dulo spamBlocker. Esta vulnerabilidad requiere una sesi\u00f3n de administrador autenticada en un Firebox administrado localmente. Este problema afecta a los sistemas operativos Fireware: desde la versi\u00f3n 12.0 hasta la 12.5.12+701324, desde la versi\u00f3n 12.6 hasta la 12.11."}], "id": "CVE-2025-1071", "lastModified": "2026-08-08T00:16:33.900", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1071", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-02-14T14:04:09.605821Z", "version": "2.0.3"}}]}, "published": "2025-02-14T14:15:32.560", "references": [{"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "url": "https://psirt.watchguard.com/CVE-2025-1071"}, {"source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "tags": ["Vendor Advisory"], "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00001"}], "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3", "type": "Secondary"}]}

{}

{}