PT-2020-7725 · Watchguard · Watchguard Xtm

Published 2020-02-07 · Updated 2020-02-11 · CVE-2014-6413

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WatchGuard XTM version 11.8.3

Description A Cross-site Scripting (XSS) issue exists via the poll name parameter in the "firewall/policy script" API endpoint.

Recommendations For WatchGuard XTM version 11.8.3, avoid using the poll name parameter in the affected script until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-6413

Affected Products

Watchguard Xtm

References · 5

• 🔥 https://packetstormsecurity.com/files/128310 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Sep/70 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-6413 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96069 · Note
• http://securityfocus.com/bid/69958 · Note