CVE-2014-4023

2014-10-2814:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4023

cross-site scripting

xss

f5 big-ip

security vulnerability

web security

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0 through 11.4.1 and 10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.3.0
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.4.1
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.5.0
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.5.1
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.4.0
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.5.0
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.4.0
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.4.1
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.3.0
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.5.1

CPE	Name	Operator	Version
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.3.0
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.4.1
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.5.0
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.5.1
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.4.0
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.5.0
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.4.0
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.4.1
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.3.0
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.5.1