Vulnerabilities (CVE)

Filtered by vendor Watchguard Subscribe
Total 84 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-6154 2 Microsoft, Watchguard 2 Windows, Fireware 2024-11-21 5.8 MEDIUM 6.1 MEDIUM
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2014-6413 1 Watchguard 1 Fireware Xtm 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script.
CVE-2024-6594 1 Watchguard 1 Single Sign-on Client 2024-10-01 N/A 7.5 HIGH
Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands. This issue affects Single Sign-On Client: through 12.7.
CVE-2024-6593 1 Watchguard 1 Authentication Gateway 2024-10-01 N/A 9.1 CRITICAL
Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. This issue affects Authentication Gateway: through 12.10.2.