K41997459: BIG-IP APM XSS vulnerability CVE-2021-23054

🗓️ 21 Feb 2023 19:00:01Reported by f5Type

f5🔗 my.f5.com👁 44 Views

BIG-IP APM XSS vulnerability CVE-2021-23054. Reflected XSS in authenticated user resource information pag

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-23054	27 Sep 202114:34	–	circl
CNNVD	F5 BIG-IP APM 跨站脚本漏洞	24 Sep 202100:00	–	cnnvd
CVE	CVE-2021-23054	27 Sep 202110:40	–	cve
Cvelist	CVE-2021-23054	27 Sep 202110:40	–	cvelist
EUVD	EUVD-2021-10172	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K41997459)	27 Sep 202100:00	–	nessus
NCSC	Fixed vulnerability in Big-IP Access Policy Manager (APM).	24 Sep 202100:00	–	ncsc
NVD	CVE-2021-23054	27 Sep 202111:15	–	nvd
OSV	CVE-2021-23054	27 Sep 202111:15	–	osv
Prion	Cross site scripting	27 Sep 202111:15	–	prion

Vulners

Node

f5 big-ip_aamMatch15.1.8

OR

f5 big-ip_aamMatch15.1.7

OR

f5 big-ip_aamMatch15.1.6

OR

f5 big-ip_aamMatch15.1.5

OR

f5 big-ip_aamMatch15.1.4

OR

f5 big-ip_aamMatch15.1.3

OR

f5 big-ip_aamMatch15.1.2

OR

f5 big-ip_aamMatch15.1.1

OR

f5 big-ip_aamMatch15.1.0

OR

f5 big-ip_aamMatch14.1.5

OR

f5 big-ip_aamMatch14.1.4

OR

f5 big-ip_aamMatch14.1.3

OR

f5 big-ip_aamMatch14.1.2

OR

f5 big-ip_aamMatch14.1.0

OR

f5 big-ip_aamMatch13.1.5

OR

f5 big-ip_aamMatch13.1.4

OR

f5 big-ip_aamMatch13.1.3

OR

f5 big-ip_aamMatch13.1.1

OR

f5 big-ip_aamMatch13.1.0

OR

f5 big-ip_aamMatch12.1.6

OR

f5 big-ip_aamMatch12.1.5

OR

f5 big-ip_aamMatch12.1.4

OR

f5 big-ip_aamMatch12.1.3

OR

f5 big-ip_aamMatch12.1.2

OR

f5 big-ip_aamMatch12.1.1

OR

f5 big-ip_aamMatch12.1.0

OR

f5 big-ip_aamMatch11.6.5

OR

f5 big-ip_aamMatch11.6.4

OR

f5 big-ip_aamMatch11.6.3

OR

f5 big-ip_aamMatch11.6.2

OR

f5 big-ip_aamMatch11.6.1

OR

f5 big-ip_afmMatch17.1.0

OR

f5 big-ip_afmMatch17.0.0

OR

f5 big-ip_afmMatch16.1.3

OR

f5 big-ip_afmMatch16.1.2

OR

f5 big-ip_afmMatch16.1.1

OR

f5 big-ip_afmMatch16.1.0

OR

f5 big-ip_afmMatch16.0.1

OR

f5 big-ip_afmMatch16.0.0

OR

f5 big-ip_afmMatch15.1.8

OR

f5 big-ip_afmMatch15.1.7

OR

f5 big-ip_afmMatch15.1.6

OR

f5 big-ip_afmMatch15.1.5

OR

f5 big-ip_afmMatch15.1.4

OR

f5 big-ip_afmMatch15.1.3

OR

f5 big-ip_afmMatch15.1.2

OR

f5 big-ip_afmMatch15.1.1

OR

f5 big-ip_afmMatch15.1.0

OR

f5 big-ip_afmMatch14.1.5

OR

f5 big-ip_afmMatch14.1.4

OR

f5 big-ip_afmMatch14.1.3

OR

f5 big-ip_afmMatch14.1.2

OR

f5 big-ip_afmMatch14.1.0

OR

f5 big-ip_afmMatch13.1.5

OR

f5 big-ip_afmMatch13.1.4

OR

f5 big-ip_afmMatch13.1.3

OR

f5 big-ip_afmMatch13.1.1

OR

f5 big-ip_afmMatch13.1.0

OR

f5 big-ip_afmMatch12.1.6

OR

f5 big-ip_afmMatch12.1.5

OR

f5 big-ip_afmMatch12.1.4

OR

f5 big-ip_afmMatch12.1.3

OR

f5 big-ip_afmMatch12.1.2

OR

f5 big-ip_afmMatch12.1.1

OR

f5 big-ip_afmMatch12.1.0

OR

f5 big-ip_afmMatch11.6.5

OR

f5 big-ip_afmMatch11.6.4

OR

f5 big-ip_afmMatch11.6.3

OR

f5 big-ip_afmMatch11.6.2

OR

f5 big-ip_afmMatch11.6.1

OR

f5 big-ip_analyticsMatch17.1.0

OR

f5 big-ip_analyticsMatch17.0.0

OR

f5 big-ip_analyticsMatch16.1.3

OR

f5 big-ip_analyticsMatch16.1.2

OR

f5 big-ip_analyticsMatch16.1.1

OR

f5 big-ip_analyticsMatch16.1.0

OR

f5 big-ip_analyticsMatch16.0.1

OR

f5 big-ip_analyticsMatch16.0.0

OR

f5 big-ip_analyticsMatch15.1.8

OR

f5 big-ip_analyticsMatch15.1.7

OR

f5 big-ip_analyticsMatch15.1.6

OR

f5 big-ip_analyticsMatch15.1.5

OR

f5 big-ip_analyticsMatch15.1.4

OR

f5 big-ip_analyticsMatch15.1.3

OR

f5 big-ip_analyticsMatch15.1.2

OR

f5 big-ip_analyticsMatch15.1.1

OR

f5 big-ip_analyticsMatch15.1.0

OR

f5 big-ip_analyticsMatch14.1.5

OR

f5 big-ip_analyticsMatch14.1.4

OR

f5 big-ip_analyticsMatch14.1.3

OR

f5 big-ip_analyticsMatch14.1.2

OR

f5 big-ip_analyticsMatch14.1.0

OR

f5 big-ip_analyticsMatch13.1.5

OR

f5 big-ip_analyticsMatch13.1.4

OR

f5 big-ip_analyticsMatch13.1.3

OR

f5 big-ip_analyticsMatch13.1.1

OR

f5 big-ip_analyticsMatch13.1.0

OR

f5 big-ip_analyticsMatch12.1.6

OR

f5 big-ip_analyticsMatch12.1.5

OR

f5 big-ip_analyticsMatch12.1.4

OR

f5 big-ip_analyticsMatch12.1.3

OR

f5 big-ip_analyticsMatch12.1.2

OR

f5 big-ip_analyticsMatch12.1.1

OR

f5 big-ip_analyticsMatch12.1.0

OR

f5 big-ip_analyticsMatch11.6.5

OR

f5 big-ip_analyticsMatch11.6.4

OR

f5 big-ip_analyticsMatch11.6.3

OR

f5 big-ip_analyticsMatch11.6.2

OR

f5 big-ip_analyticsMatch11.6.1

OR

f5 big-ip_apmMatch17.1.0

OR

f5 big-ip_apmMatch17.0.0

OR

f5 big-ip_apmMatch16.1.3

OR

f5 big-ip_apmMatch16.1.2

OR

f5 big-ip_apmMatch16.1.1

OR

f5 big-ip_apmMatch16.1.0

OR

f5 big-ip_apmMatch16.0.1

OR

f5 big-ip_apmMatch16.0.0

OR

f5 big-ip_apmMatch15.1.8

OR

f5 big-ip_apmMatch15.1.7

OR

f5 big-ip_apmMatch15.1.6

OR

f5 big-ip_apmMatch15.1.5

OR

f5 big-ip_apmMatch15.1.4

OR

f5 big-ip_apmMatch15.1.3

OR

f5 big-ip_apmMatch15.1.2

OR

f5 big-ip_apmMatch15.1.1

OR

f5 big-ip_apmMatch15.1.0

OR

f5 big-ip_apmMatch14.1.5

OR

f5 big-ip_apmMatch14.1.4

OR

f5 big-ip_apmMatch14.1.3

OR

f5 big-ip_apmMatch14.1.2

OR

f5 big-ip_apmMatch14.1.0

OR

f5 big-ip_apmMatch13.1.5

OR

f5 big-ip_apmMatch13.1.4

OR

f5 big-ip_apmMatch13.1.3

OR

f5 big-ip_apmMatch13.1.1

OR

f5 big-ip_apmMatch13.1.0

OR

f5 big-ip_apmMatch12.1.6

OR

f5 big-ip_apmMatch12.1.5

OR

f5 big-ip_apmMatch12.1.4

OR

f5 big-ip_apmMatch12.1.3

OR

f5 big-ip_apmMatch12.1.2

OR

f5 big-ip_apmMatch12.1.1

OR

f5 big-ip_apmMatch12.1.0

OR

f5 big-ip_apmMatch11.6.5

OR

f5 big-ip_apmMatch11.6.4

OR

f5 big-ip_apmMatch11.6.3

OR

f5 big-ip_apmMatch11.6.2

OR

f5 big-ip_apmMatch11.6.1

OR

f5 big-ip_asmMatch17.1.0

OR

f5 big-ip_asmMatch17.0.0

OR

f5 big-ip_asmMatch16.1.3

OR

f5 big-ip_asmMatch16.1.2

OR

f5 big-ip_asmMatch16.1.1

OR

f5 big-ip_asmMatch16.1.0

OR

f5 big-ip_asmMatch16.0.1

OR

f5 big-ip_asmMatch16.0.0

OR

f5 big-ip_asmMatch15.1.8

OR

f5 big-ip_asmMatch15.1.7

OR

f5 big-ip_asmMatch15.1.6

OR

f5 big-ip_asmMatch15.1.5

OR

f5 big-ip_asmMatch15.1.4

OR

f5 big-ip_asmMatch15.1.3

OR

f5 big-ip_asmMatch15.1.2

OR

f5 big-ip_asmMatch15.1.1

OR

f5 big-ip_asmMatch15.1.0

OR

f5 big-ip_asmMatch14.1.5

OR

f5 big-ip_asmMatch14.1.4

OR

f5 big-ip_asmMatch14.1.3

OR

f5 big-ip_asmMatch14.1.2

OR

f5 big-ip_asmMatch14.1.0

OR

f5 big-ip_asmMatch13.1.5

OR

f5 big-ip_asmMatch13.1.4

OR

f5 big-ip_asmMatch13.1.3

OR

f5 big-ip_asmMatch13.1.1

OR

f5 big-ip_asmMatch13.1.0

OR

f5 big-ip_asmMatch12.1.6

OR

f5 big-ip_asmMatch12.1.5

OR

f5 big-ip_asmMatch12.1.4

OR

f5 big-ip_asmMatch12.1.3

OR

f5 big-ip_asmMatch12.1.2

OR

f5 big-ip_asmMatch12.1.1

OR

f5 big-ip_asmMatch12.1.0

OR

f5 big-ip_asmMatch11.6.5

OR

f5 big-ip_asmMatch11.6.4

OR

f5 big-ip_asmMatch11.6.3

OR

f5 big-ip_asmMatch11.6.2

OR

f5 big-ip_asmMatch11.6.1

OR

f5 big-ip_distributed_cloud_servicesMatch17.1.0

OR

f5 big-ip_distributed_cloud_servicesMatch17.0.0

OR

f5 big-ip_dnsMatch17.1.0

OR

f5 big-ip_dnsMatch17.0.0

OR

f5 big-ip_dnsMatch16.1.3

OR

f5 big-ip_dnsMatch16.1.2

OR

f5 big-ip_dnsMatch16.1.1

OR

f5 big-ip_dnsMatch16.1.0

OR

f5 big-ip_dnsMatch16.0.1

OR

f5 big-ip_dnsMatch16.0.0

OR

f5 big-ip_dnsMatch15.1.8

OR

f5 big-ip_dnsMatch15.1.7

OR

f5 big-ip_dnsMatch15.1.6

OR

f5 big-ip_dnsMatch15.1.5

OR

f5 big-ip_dnsMatch15.1.4

OR

f5 big-ip_dnsMatch15.1.3

OR

f5 big-ip_dnsMatch15.1.2

OR

f5 big-ip_dnsMatch15.1.1

OR

f5 big-ip_dnsMatch15.1.0

OR

f5 big-ip_dnsMatch14.1.5

OR

f5 big-ip_dnsMatch14.1.4

OR

f5 big-ip_dnsMatch14.1.3

OR

f5 big-ip_dnsMatch14.1.2

OR

f5 big-ip_dnsMatch14.1.0

OR

f5 big-ip_dnsMatch13.1.5

OR

f5 big-ip_dnsMatch13.1.4

OR

f5 big-ip_dnsMatch13.1.3

OR

f5 big-ip_dnsMatch13.1.1

OR

f5 big-ip_dnsMatch13.1.0

OR

f5 big-ip_dnsMatch12.1.6

OR

f5 big-ip_dnsMatch12.1.5

OR

f5 big-ip_dnsMatch12.1.4

OR

f5 big-ip_dnsMatch12.1.3

OR

f5 big-ip_dnsMatch12.1.2

OR

f5 big-ip_dnsMatch12.1.1

OR

f5 big-ip_dnsMatch12.1.0

OR

f5 big-ip_fpsMatch17.1.0

OR

f5 big-ip_fpsMatch17.0.0

OR

f5 big-ip_fpsMatch16.1.3

OR

f5 big-ip_fpsMatch16.1.2

OR

f5 big-ip_fpsMatch16.1.1

OR

f5 big-ip_fpsMatch16.1.0

OR

f5 big-ip_fpsMatch16.0.1

OR

f5 big-ip_fpsMatch16.0.0

OR

f5 big-ip_fpsMatch15.1.8

OR

f5 big-ip_fpsMatch15.1.7

OR

f5 big-ip_fpsMatch15.1.6

OR

f5 big-ip_fpsMatch15.1.5

OR

f5 big-ip_fpsMatch15.1.4

OR

f5 big-ip_fpsMatch15.1.3

OR

f5 big-ip_fpsMatch15.1.2

OR

f5 big-ip_fpsMatch15.1.1

OR

f5 big-ip_fpsMatch15.1.0

OR

f5 big-ip_fpsMatch14.1.5

OR

f5 big-ip_fpsMatch14.1.4

OR

f5 big-ip_fpsMatch14.1.3

OR

f5 big-ip_fpsMatch14.1.2

OR

f5 big-ip_fpsMatch14.1.0

OR

f5 big-ip_fpsMatch13.1.5

OR

f5 big-ip_fpsMatch13.1.4

OR

f5 big-ip_fpsMatch13.1.3

OR

f5 big-ip_fpsMatch13.1.1

OR

f5 big-ip_fpsMatch13.1.0

OR

f5 big-ip_gtmMatch11.6.5

OR

f5 big-ip_gtmMatch11.6.4

OR

f5 big-ip_gtmMatch11.6.3

OR

f5 big-ip_gtmMatch11.6.2

OR

f5 big-ip_gtmMatch11.6.1

OR

f5 big-ip_link_controllerMatch17.1.0

OR

f5 big-ip_link_controllerMatch17.0.0

OR

f5 big-ip_link_controllerMatch16.1.3

OR

f5 big-ip_link_controllerMatch16.1.2

OR

f5 big-ip_link_controllerMatch16.1.1

OR

f5 big-ip_link_controllerMatch16.1.0

OR

f5 big-ip_link_controllerMatch16.0.1

OR

f5 big-ip_link_controllerMatch16.0.0

OR

f5 big-ip_link_controllerMatch15.1.8

OR

f5 big-ip_link_controllerMatch15.1.7

OR

f5 big-ip_link_controllerMatch15.1.6

OR

f5 big-ip_link_controllerMatch15.1.5

OR

f5 big-ip_link_controllerMatch15.1.4

OR

f5 big-ip_link_controllerMatch15.1.3

OR

f5 big-ip_link_controllerMatch15.1.2

OR

f5 big-ip_link_controllerMatch15.1.1

OR

f5 big-ip_link_controllerMatch15.1.0

OR

f5 big-ip_link_controllerMatch14.1.5

OR

f5 big-ip_link_controllerMatch14.1.4

OR

f5 big-ip_link_controllerMatch14.1.3

OR

f5 big-ip_link_controllerMatch14.1.2

OR

f5 big-ip_link_controllerMatch14.1.0

OR

f5 big-ip_link_controllerMatch13.1.5

OR

f5 big-ip_link_controllerMatch13.1.4

OR

f5 big-ip_link_controllerMatch13.1.3

OR

f5 big-ip_link_controllerMatch13.1.1

OR

f5 big-ip_link_controllerMatch13.1.0

OR

f5 big-ip_link_controllerMatch12.1.6

OR

f5 big-ip_link_controllerMatch12.1.5

OR

f5 big-ip_link_controllerMatch12.1.4

OR

f5 big-ip_link_controllerMatch12.1.3

OR

f5 big-ip_link_controllerMatch12.1.2

OR

f5 big-ip_link_controllerMatch12.1.1

OR

f5 big-ip_link_controllerMatch12.1.0

OR

f5 big-ip_link_controllerMatch11.6.5

OR

f5 big-ip_link_controllerMatch11.6.4

OR

f5 big-ip_link_controllerMatch11.6.3

OR

f5 big-ip_link_controllerMatch11.6.2

OR

f5 big-ip_link_controllerMatch11.6.1

OR

f5 big-ip_ltmMatch17.1.0

OR

f5 big-ip_ltmMatch17.0.0

OR

f5 big-ip_ltmMatch16.1.3

OR

f5 big-ip_ltmMatch16.1.2

OR

f5 big-ip_ltmMatch16.1.1

OR

f5 big-ip_ltmMatch16.1.0

OR

f5 big-ip_ltmMatch16.0.1

OR

f5 big-ip_ltmMatch16.0.0

OR

f5 big-ip_ltmMatch15.1.8

OR

f5 big-ip_ltmMatch15.1.7

OR

f5 big-ip_ltmMatch15.1.6

OR

f5 big-ip_ltmMatch15.1.5

OR

f5 big-ip_ltmMatch15.1.4

OR

f5 big-ip_ltmMatch15.1.3

OR

f5 big-ip_ltmMatch15.1.2

OR

f5 big-ip_ltmMatch15.1.1

OR

f5 big-ip_ltmMatch15.1.0

OR

f5 big-ip_ltmMatch14.1.5

OR

f5 big-ip_ltmMatch14.1.4

OR

f5 big-ip_ltmMatch14.1.3

OR

f5 big-ip_ltmMatch14.1.2

OR

f5 big-ip_ltmMatch14.1.0

OR

f5 big-ip_ltmMatch13.1.5

OR

f5 big-ip_ltmMatch13.1.4

OR

f5 big-ip_ltmMatch13.1.3

OR

f5 big-ip_ltmMatch13.1.1

OR

f5 big-ip_ltmMatch13.1.0

OR

f5 big-ip_ltmMatch12.1.6

OR

f5 big-ip_ltmMatch12.1.5

OR

f5 big-ip_ltmMatch12.1.4

OR

f5 big-ip_ltmMatch12.1.3

OR

f5 big-ip_ltmMatch12.1.2

OR

f5 big-ip_ltmMatch12.1.1

OR

f5 big-ip_ltmMatch12.1.0

OR

f5 big-ip_ltmMatch11.6.5

OR

f5 big-ip_ltmMatch11.6.4

OR

f5 big-ip_ltmMatch11.6.3

OR

f5 big-ip_ltmMatch11.6.2

OR

f5 big-ip_ltmMatch11.6.1

OR

f5 big-ip_pemMatch17.1.0

OR

f5 big-ip_pemMatch17.0.0

OR

f5 big-ip_pemMatch16.1.3

OR

f5 big-ip_pemMatch16.1.2

OR

f5 big-ip_pemMatch16.1.1

OR

f5 big-ip_pemMatch16.1.0

OR

f5 big-ip_pemMatch16.0.1

OR

f5 big-ip_pemMatch16.0.0

OR

f5 big-ip_pemMatch15.1.8

OR

f5 big-ip_pemMatch15.1.7

OR

f5 big-ip_pemMatch15.1.6

OR

f5 big-ip_pemMatch15.1.5

OR

f5 big-ip_pemMatch15.1.4

OR

f5 big-ip_pemMatch15.1.3

OR

f5 big-ip_pemMatch15.1.2

OR

f5 big-ip_pemMatch15.1.1

OR

f5 big-ip_pemMatch15.1.0

OR

f5 big-ip_pemMatch14.1.5

OR

f5 big-ip_pemMatch14.1.4

OR

f5 big-ip_pemMatch14.1.3

OR

f5 big-ip_pemMatch14.1.2

OR

f5 big-ip_pemMatch14.1.0

OR

f5 big-ip_pemMatch13.1.5

OR

f5 big-ip_pemMatch13.1.4

OR

f5 big-ip_pemMatch13.1.3

OR

f5 big-ip_pemMatch13.1.1

OR

f5 big-ip_pemMatch13.1.0

OR

f5 big-ip_pemMatch12.1.6

OR

f5 big-ip_pemMatch12.1.5

OR

f5 big-ip_pemMatch12.1.4

OR

f5 big-ip_pemMatch12.1.3

OR

f5 big-ip_pemMatch12.1.2

OR

f5 big-ip_pemMatch12.1.1

OR

f5 big-ip_pemMatch12.1.0

OR

f5 big-ip_pemMatch11.6.5

OR

f5 big-ip_pemMatch11.6.4

OR

f5 big-ip_pemMatch11.6.3

OR

f5 big-ip_pemMatch11.6.2

OR

f5 big-ip_pemMatch11.6.1

OR

f5 f5os-cMatch1.1.4

OR

f5 f5os-cMatch1.1.3

OR

f5 f5os-cMatch1.1.2

OR

f5 f5os-cMatch1.1.1

OR

f5 f5os-cMatch1.1.0

OR

f5 big-iq_centralized_managementMatch8.1.0

OR

f5 big-iq_centralized_managementMatch8.0.0

OR

f5 big-iq_centralized_managementMatch7.1.0

OR

f5 big-iq_centralized_managementMatch7.0.0

OR

f5 big-iq_centralized_managementMatch6.1.0

OR

f5 big-ip_ddos_hybrid_defenderMatch16.1.0

OR

f5 big-ip_ddos_hybrid_defenderMatch16.0.0

OR

f5 big-ip_ddos_hybrid_defenderMatch15.1.1

OR

f5 big-ip_ddos_hybrid_defenderMatch15.1.0

OR

f5 big-ip_ddos_hybrid_defenderMatch14.1.2

OR

f5 big-ip_ddos_hybrid_defenderMatch14.1.0

OR

f5 big-ip_ssl_orchestratorMatch16.1.0

OR

f5 big-ip_ssl_orchestratorMatch16.0.1

OR

f5 big-ip_ssl_orchestratorMatch16.0.0

OR

f5 big-ip_ssl_orchestratorMatch15.1.1

OR

f5 big-ip_ssl_orchestratorMatch15.1.0

OR

f5 big-ip_ssl_orchestratorMatch14.1.4

OR

f5 big-ip_ssl_orchestratorMatch14.1.2

OR

f5 big-ip_ssl_orchestratorMatch14.1.0

OR

f5 traffix_sdcMatch5.2.0

OR

f5 traffix_sdcMatch5.1.0

03 May 2023 08:52Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

CVSS 3.16.1

EPSS0.00379

big-ip xss vulnerability authenticated user resource information webtop configuration access profiles