Lucene search

K
cvelistMitreCVELIST:CVE-2022-31792
HistorySep 06, 2022 - 6:24 p.m.

CVE-2022-31792

2022-09-0618:24:45
mitre
www.cve.org
3
watchguard
firebox
xtm
cross-site scripting
vulnerability
management interface
remote attacker
arbitrary javascript code
fireware os 12.8.1
12.5.10
12.1.4

EPSS

0.001

Percentile

29.2%

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

EPSS

0.001

Percentile

29.2%

Related for CVELIST:CVE-2022-31792