Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/12/05 10:33 p.m.2 views

CVE-2025-13938

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

6.1CVSS6.2AI score0.00023EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/05 12:31 a.m.1 views

EUVD-2025-201301

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

4.8CVSS5.7AI score0.00023EPSS
Exploits0References2
OSV
OSV
added 2025/12/04 10:15 p.m.0 views

CVE-2025-13938

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

6.1CVSS5.7AI score0.00023EPSS
Exploits0References1
NVD
NVD
added 2025/12/04 10:15 p.m.1 views

CVE-2025-13938

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

6.1CVSS0.00023EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/04 9:47 p.m.15 views

CVE-2025-13938 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

4.8CVSS0.00023EPSS
Exploits0References1
CVE
CVE
added 2025/12/04 9:47 p.m.6 views

CVE-2025-13938

Vulnerability: CVE-2025-13938 is a Stored XSS in WatchGuard Fireware OS (Autotask Technology Integration module). Affected versions are Fireware OS 12.4–12.11.4, 12.5–12.5.13, and 2025.1–2025.1.2. Root cause: improper neutralization of input during web page generation for the Autotask Integration...

6.1CVSS5.8AI score0.00023EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/04 9:47 p.m.0 views

CVE-2025-13938 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS.This issue affects Fireware OS 12.4 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 ...

4.8CVSS5.8AI score0.00023EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.2 views

PT-2025-49162

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.4 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 Description A flaw exists in the Autotask Technology Integration module of...

6.1CVSS6AI score0.00023EPSS
Exploits0References6
Exploit DB
Exploit DB
added 2021/09/16 12:0 a.m.477 views

ImpressCMS 1.4.2 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: ImpressCMS 1.4.2 - Remote Code Execution RCE Authenticated Date: 15-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.impresscms.org/ Software Link: https://www.impresscms.org/modules/downloads/ Version: 1.4.2 Category: Webapps Tested on: Linux/Windows...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2021/09/16 12:0 a.m.219 views

Impress CMS 1.4.2 Remote Code Execution

Exploit Title: ImpressCMS 1.4.2 - Remote Code Execution RCE Authenticated Date: 15-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.impresscms.org/ Software Link: https://www.impresscms.org/modules/downloads/ Version: 1.4.2 Category: Webapps Tested on: Linux/Windows...

0.3AI score
Exploits0
0day.today
0day.today
added 2020/07/10 12:0 a.m.302 views

Impress CMS 1.4.0 Code Execution / SQL Injection Vulnerabilities

Impress CMS version 1.4.0 has an issue where an authenticated user can make use of the AutoTask feature to execute php code, allowing for remote SQL injection and remote code execution. Author: AppleBois Homepage: https://sourceforge.net/projects/impresscms/ Affected Version: 1.4.0 Remote Code...

0.8AI score
Exploits0
Packet Storm
Packet Storm
added 2020/07/10 12:0 a.m.210 views

Impress CMS 1.4.0 Code Execution / SQL Injection

Author: AppleBois Homepage: https://sourceforge.net/projects/impresscms/ Affected Version: 1.4.0 Remote Code Execution or Sql Injection Authenticated user can make use of the AutoTask feature to execute php code, it allow authenticated user execute their own php code, which can cause SQL Injectio...

0.7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/07/11 5:43 p.m.10 views

us.backup.autotask.net XSS vulnerability

Open Bug Bounty ID: OBB-644994 Description| Value ---|--- Affected Website:| us.backup.autotask.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Rows per page
Query Builder