CVE-2015-5452: WatchGuard Xcs

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.

Affected products

• WatchGuard Xcs: version 9.2 only; version 10.0 only

Published 2015-07-08. Last modified 2026-06-17.