> CVE-2025-1239

« BACK_TO_HOME
PUBLISHED
2025-02-14 14:15
MODIFIED
2025-02-14 14:15
EPSS (Prob. Exploit)
0.55%
Top 53.5%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04

> DESCRIPTION

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the Blocked Sites list. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-rg35-5v25-mqvp MODERATE

Keycloak vulnerable to session takeovers due to reuse of session identifiers

AFFECTED PACKAGES:
MAVEN / org.keycloak:keycloak-services
< 26.0.0
Fixed in: 26.0.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/02/2025 14:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME