CVE-2014-0338: WatchGuard Fireware

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the pol_name parameter.

Affected products

• WatchGuard Fireware: up to and including 11.8.1; version 11.6 only; version 11.6.1 only; version 11.6.3 only; version 11.6.5 only; version 11.6.6 only; …

Published 2014-03-16. Last modified 2026-06-17.