CVE-2025-4805

4.8 mediumEPSS 0.6%

Medium (4.8). EPSS 0.6% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-05-16
Modified: 2026-08-08
Record from: the NVD, synced 2026-10-19

References

https://psirt.watchguard.com/CVE-2025-4805
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00007

Check your stack JSON