Unscored severity · published Oct 19, 2013
CVE-2013-5702
Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Fireware · Watchguard
through 11.7.4; 11.6; 11.6.1; 11.6.3; 11.6.5; 11.6.6; +3 more · source: NVD
WS
Watchguard System Manager · Watchguard
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5702
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5702
watchguardsecuritycenter.com
http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/
Vendor Advisory
http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/
More from Fireware
9.8
CVE-2025-14733
WatchGuard Firebox iked Out of Bounds Write Vulnerability
9.8
CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
9.8
CVE-2022-26318
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
8.8
CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
9.8
CVE-2026-86131
Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution