CVE-2025-13939

🗓️ 04 Dec 2025 21:47:37Reported by WatchGuardType

CVE-2025-13939 is a stored cross site scripting vulnerability in WatchGuard Firebox Gateway Wireless Controller due to improper input neutralization in web page generation.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-13939	4 Dec 202522:08	–	circl
CNNVD	WatchGuard Fireware OS 安全漏洞	4 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-13939 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller	4 Dec 202521:47	–	cvelist
EUVD	EUVD-2025-201300	5 Dec 202500:31	–	euvd
NVD	CVE-2025-13939	4 Dec 202522:15	–	nvd
Positive Technologies	PT-2025-49163	4 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-13939	5 Dec 202522:33	–	redhatcve
Vulnrichment	CVE-2025-13939 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller	4 Dec 202521:47	–	vulnrichment

NVD

CNA

Node

watchguard firewareRange2025.1–2025.1.3

AND

watchguard firebox_t115-wMatch-

watchguard firebox_t125Match-

watchguard firebox_t125-wMatch-

watchguard firebox_t145Match-

watchguard firebox_t145-wMatch-

watchguard firebox_t185Match-

Node

watchguard firewareRange11.7.2–12.11.5

AND

watchguard firebox_m270Match-

watchguard firebox_m290Match-

watchguard firebox_m370Match-

watchguard firebox_m390Match-

watchguard firebox_m440Match-

watchguard firebox_m4600Match-

watchguard firebox_m470Match-

watchguard firebox_m4800Match-

watchguard firebox_m5600Match-

watchguard firebox_m570Match-

watchguard firebox_m5800Match-

watchguard firebox_m590Match-

watchguard firebox_m670Match-

watchguard firebox_m690Match-

watchguard firebox_nv5Match-

watchguard firebox_t20Match-

watchguard firebox_t25Match-

watchguard firebox_t40Match-

watchguard firebox_t45Match-

watchguard firebox_t55Match-

watchguard firebox_t70Match-

watchguard firebox_t80Match-

watchguard firebox_t85Match-

watchguard fireboxcloudMatch-

watchguard fireboxvMatch-

Node

watchguard firewareRange11.7.2–12.5.14

AND

watchguard firebox_t15Match-

watchguard firebox_t35Match-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Gateway Wireless Controller"
    ],
    "product": "Fireware OS",
    "vendor": "WatchGuard",
    "versions": [
      {
        "lessThanOrEqual": "11.12.4+541730",
        "status": "affected",
        "version": "11.7.2",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.11.4",
        "status": "affected",
        "version": "12.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.5.13",
        "status": "affected",
        "version": "12.5",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2025.1.2",
        "status": "affected",
        "version": "2025.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
watchguard	www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00024

10 Dec 2025 16:03Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

CVSS 44.8

EPSS0.00023

SSVC

CWE-79