CVE / VULNERABILITY RESEARCH
Publicly disclosed vulnerabilities identified through security research, responsible disclosure and coordinated vulnerability disclosure programs.
2026
Web UI Authentication Brute-Force Due to Missing Rate Limiting
WatchGuard Dimension’s web login endpoint does not enforce effective rate limiting or account lockout by default, allowing a remote attacker to perform automated password guessing against user accounts.
Blind SSRF via Database Test Connection
Blind Server-Side Request Forgery vulnerability in the WatchGuard Dimension Database Test Connection feature.
SSRF via FTP Server Test Connection
A Server-Side Request Forgery vulnerability in the WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
SSRF via Email Server Test Settings
A Server-Side Request Forgery vulnerability in the WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
SSRF via Remote Backup Connection Test
A Server-Side Request Forgery vulnerability in the WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.
Stored XSS via Backup Historical Data Feature
A Cross-Site Scripting vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator to execute arbitrary JavaScript in another user’s browser.
Session Hijack via Exposed Session Tokens in Diagnostic Logs
WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve the log and extract a Super Administrator’s active session token, potentially enabling account takeover.
Log Server Configuration Lock Bypass
Configuration lock bypass vulnerability affecting the WatchGuard Dimension Log Server configuration.
Stored XSS in Scheduled Report Task
A Stored Cross-Site Scripting vulnerability in WatchGuard Dimension’s task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML or JavaScript that executes in the browser session of another user.
Blind SSRF / Internal Network Reconnaissance
Blind SSRF through OpenProject webhooks and the SMTP test functionality allows internal network reconnaissance by observing differences in response behaviour for reachable hosts and ports.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox SIP Proxy configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox spamBlocker module.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox Autotask Technology Integration configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox ConnectWise Technology Integration configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox Tigerpaw Technology Integration configuration.
Cross-Site Request Forgery
Cross-Site Request Forgery vulnerability affecting the WatchGuard Firebox Fireware Web UI.
Reflected Cross-Site Scripting
Reflected Cross-Site Scripting (XSS) vulnerability affecting WatchGuard Firewall NV5 running Fireware OS 12.11.6.
2025
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability affecting a WatchGuard Fireware OS configuration component.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability affecting a WatchGuard Fireware OS configuration component.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability affecting a WatchGuard Fireware OS configuration component.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability affecting a WatchGuard Fireware OS configuration component.
Unauthorized Access to Sensitive Attributes
A limited administrator can retrieve sensitive custom user attributes through the unmanagedAttributes endpoint, bypassing User Profile visibility restrictions.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox SIP Proxy configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox IPS configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox Access Portal configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox Hotspot configuration.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox Blocked Sites List.
Stored Cross-Site Scripting
Stored Cross-Site Scripting vulnerability in the WatchGuard Firebox spamBlocker module.
Hall of Fame & Recognition
Public acknowledgements and security research recognition received through responsible disclosure and vulnerability research programs.