K15532 : XSS vulnerability in echo.jsp CVE-2014-4023

2015-08-1000:00:00

my.f5.com

5.4 Medium

AI Score

Confidence

High

JSON

Security Advisory Description

A cross-site scripting (XSS) vulnerability exists in tmui/dashboard/echo.jsp for the BIG-IP Configuration utility and the Enterprise Manager Configuration utility.
Impact
Some echo.jsp parameters may allow an attacker to bypass cross-site scripting (XSS) protection mechanisms using a crafted string.

CPENameOperatorVersion
big-ip afmeq11.3.0
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.6.0
big-ip analyticseq11.0.0
big-ip analyticseq11.1.0
big-ip analyticseq11.2.0

Name	Operator	Version
big-ip afm	eq	11.3.0
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.6.0
big-ip analytics	eq	11.0.0
big-ip analytics	eq	11.1.0
big-ip analytics	eq	11.2.0

Rows per page:

1-10 of 1771

5.4 Medium

AI Score

Confidence

High

JSON

Related for F5:K15532