CVE-2025-1545

WatchGuard Firebox XPath Injection Vulnerability in Web CGI

State: Published
Severity: 8.2 High
Published: Dec 4, 2025
Updated: Aug 10, 2026
Reserved: Feb 21, 2025

Description

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.

Scores

CVSS	Score	Vector	Source
4.0	8.2 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	WatchGuard

Weaknesses

CWE-91

Affected Products

Product	Versions
Fireware OSWatchGuard	2025.1 to before 2025.1.3Affected 12.0 to before 12.11.5Affected 11.11 through 11.12.4+541730Affected
Fireware OSWatchGuard	12.0 to before 12.5.14Affected

References

https://psirt.watchguard.com/CVE-2025-1545vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.