3 matches found
Cross site scripting
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
4.3CVSS6.2AI score0.01249EPSS
SaveExploits1References4Affected Software1
CVE-2014-6413: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
6.1CVSS6.3AI score0.01249EPSS
SaveExploits1References2
PT-2020-7725
Name of the Vulnerable Software and Affected Versions WatchGuard XTM version 11.8.3 Description A Cross-site Scripting XSS issue exists via the poll name parameter in the "firewall/policy script" API endpoint. Recommendations For WatchGuard XTM version 11.8.3, avoid using the poll name parameter ...
6.1CVSS0.01249EPSS
SaveExploits1References5
20