CVE-2025-13936

🗓️ 04 Dec 2025 21:45:51Reported by WatchGuardType

Stored cross site scripting in WatchGuard Firebox via Tigerpaw integration on Fireware OS versions 12.4–12.11.4, 12.5–12.5.13, and 2025.1–2025.1.2.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-13936	4 Dec 202522:08	–	circl
CNNVD	WatchGuard Fireware OS 安全漏洞	4 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-13936 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration	4 Dec 202521:45	–	cvelist
EUVD	EUVD-2025-201303	5 Dec 202500:31	–	euvd
NVD	CVE-2025-13936	4 Dec 202522:15	–	nvd
Positive Technologies	PT-2025-49160	4 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-13936	5 Dec 202522:33	–	redhatcve
Vulnrichment	CVE-2025-13936 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration	4 Dec 202521:45	–	vulnrichment

NVD

CNA

Node

watchguard firewareRange2025.1–2025.1.3

AND

watchguard firebox_t115-wMatch-

watchguard firebox_t125Match-

watchguard firebox_t125-wMatch-

watchguard firebox_t145Match-

watchguard firebox_t145-wMatch-

watchguard firebox_t185Match-

Node

watchguard firewareRange12.0.0–12.11.5

AND

watchguard firebox_m270Match-

watchguard firebox_m290Match-

watchguard firebox_m370Match-

watchguard firebox_m390Match-

watchguard firebox_m440Match-

watchguard firebox_m4600Match-

watchguard firebox_m470Match-

watchguard firebox_m4800Match-

watchguard firebox_m5600Match-

watchguard firebox_m570Match-

watchguard firebox_m5800Match-

watchguard firebox_m590Match-

watchguard firebox_m670Match-

watchguard firebox_m690Match-

watchguard firebox_nv5Match-

watchguard firebox_t20Match-

watchguard firebox_t25Match-

watchguard firebox_t40Match-

watchguard firebox_t45Match-

watchguard firebox_t55Match-

watchguard firebox_t70Match-

watchguard firebox_t80Match-

watchguard firebox_t85Match-

watchguard fireboxcloudMatch-

watchguard fireboxvMatch-

Node

watchguard firewareRange12.5–12.5.14

AND

watchguard firebox_t15Match-

watchguard firebox_t35Match-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Tigerpaw Technology Integration"
    ],
    "product": "Fireware OS",
    "vendor": "WatchGuard",
    "versions": [
      {
        "lessThanOrEqual": "12.11.4",
        "status": "affected",
        "version": "12.4",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.5.13",
        "status": "affected",
        "version": "12.5",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2025.1.2",
        "status": "affected",
        "version": "2025.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
watchguard	www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00021

10 Dec 2025 15:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

CVSS 44.8

EPSS0.00023

SSVC

CWE-79