watchguard Vulnerability Advisory Catalog

Total 103 security vulnerabilities recorded for watchguard software and firmware.

← Back to All Vendors
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless ...

๐Ÿ“… 2025-12-04
CVSS 6.1 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technolo...

๐Ÿ“… 2025-12-04
CVSS 6.1 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Techn...

๐Ÿ“… 2025-12-04
CVSS 6.1 Dossier →
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technolo...

๐Ÿ“… 2025-12-04
CVSS 6.1 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a spec...

๐Ÿ“… 2025-12-04
CVSS 7.2 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary codeย via specia...

๐Ÿ“… 2025-12-04
CVSS 7.2 Dossier →
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OSโ€™s certificate request command could allow an authenticated privileged user to execute a...

๐Ÿ“… 2025-12-04
CVSS 7.2 Dossier →
Component: fireware

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in th...

๐Ÿ“… 2025-12-04
CVSS 7.5 Dossier →
CVE-2025-9242 CRITICAL
Component: fireware

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerabili...

๐Ÿ“… 2025-09-17
CVSS 9.8 Dossier →
CVE-2025-1071 MEDIUM
Component: fireware

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS ...

๐Ÿ“… 2025-02-14
CVSS 4.8 Dossier →
CVE-2025-0178 MEDIUM
Component: fireware

Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent ...

๐Ÿ“… 2025-02-14
CVSS 6.1 Dossier →
Component: panda_dome

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affec...

๐Ÿ“… 2024-12-30
CVSS 7.8 Dossier →
Component: single_sign-on_client

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling...

๐Ÿ“… 2024-09-25
CVSS 7.5 Dossier →
CVE-2024-6593 CRITICAL
Component: authentication_gateway

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network acces...

๐Ÿ“… 2024-09-25
CVSS 9.1 Dossier →
CVE-2024-6592 CRITICAL
Component: authentication_gateway

Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Window...

๐Ÿ“… 2024-09-25
CVSS 9.1 Dossier →
Component: fireware

A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary co...

๐Ÿ“… 2024-07-09
CVSS 7.2 Dossier →
Component: mobile_vpn_with_ssl

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands w...

๐Ÿ“… 2024-07-09
CVSS 7.8 Dossier →
Component: epp_firmware

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to acce...

๐Ÿ“… 2023-10-05
CVSS 5.5 Dossier →
Component: epp_firmware

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a n...

๐Ÿ“… 2023-10-05
CVSS 5.5 Dossier →
Component: epp_firmware

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM....

๐Ÿ“… 2023-10-05
CVSS 6.7 Dossier →
Component: epp_firmware

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is poss...

๐Ÿ“… 2023-10-05
CVSS 7.8 Dossier →
Component: panda_security_vpn

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a cra...

๐Ÿ“… 2023-07-13
CVSS 6.5 Dossier →
Component: fireware

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker c...

๐Ÿ“… 2022-09-06
CVSS 5.4 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code wit...

๐Ÿ“… 2022-09-06
CVSS 7.8 Dossier →
Page 2 of 5 (103 Total Records)