CVE-2017-14615: An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0.

Security readout for executives and security teams

CVE-2017-14615 is a stored cross-site scripting issue in WatchGuard Fireware before 12.0. A malicious failed login value can later run script in a logged-in Web UI user's browser when they view specific Traffic Monitor pages, and it can also stop further events from appearing until restart. Exposure is most relevant for organizations running WatchGuard Fireware before 12.0, especially where the management interface or XML-RPC endpoint is reachable beyond tightly controlled admin networks. Prioritize remediation for internet-reachable or broadly accessible management interfaces. The issue is old and not KEV-listed, but it affects firewall administration visibility and can execute script in an authenticated management session. Mitigation focus: Upgrade affected WatchGuard Fireware deployments to version 12.0 or later.; Review WatchGuard’s security advisory for model-specific fixed releases or upgrade constraints.; Restrict Web UI and XML-RPC management access to trusted administrative networks..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.