CVE-2023-27378 BIG-IP TMUI XSS vulnerability

🗓️ 03 May 2023 14:33:49Reported by f5Type

CVE-2023-27378 BIG-IP TMUI XSS vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Traffic Management User Interface (TMUI) of the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, and BIG-IP Domain Name System programs allows attackers to execute cross-site scripting attacks.	19 May 202300:00	–	bdu_fstec
CNNVD	F5 BIG-IP 跨站脚本漏洞	3 May 202300:00	–	cnnvd
CNVD	F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2023-82308)	9 May 202300:00	–	cnvd
CVE	CVE-2023-27378	3 May 202314:33	–	cve
EUVD	EUVD-2023-31154	3 Oct 202520:07	–	euvd
F5 Networks	K000132726: BIG-IP Configuration utility XSS vulnerability CVE-2023-27378	3 May 202312:06	–	f5
F5 Networks	K000133251: Overview of F5 vulnerabilities (May 2023)	3 May 202313:05	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP Configuration utility XSS vulnerability (K000132726)	12 May 202300:00	–	nessus
NCSC	Vulnerabilities fixed in several F5 products	4 May 202300:00	–	ncsc
NVD	CVE-2023-27378	3 May 202315:15	–	nvd

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "All Modules"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "17.1.0.1",
        "status": "affected",
        "version": "17.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "17.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "16.1.3.4",
        "status": "affected",
        "version": "16.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "15.1.8.2",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "14.1.5.4",
        "status": "affected",
        "version": "14.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "13.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000132726

03 May 2023 14:33Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00387

CWE-79