K63497634: BIG-IP FPS XSS vulnerability CVE-2021-22979

🗓️ 21 Feb 2023 18:47:07Reported by f5Type

f5🔗 my.f5.com👁 24 Views

A reflected cross-site scripting vulnerability in BIG-IP Configuration utility allows remote code execution

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-22979	12 Feb 202120:43	–	circl
CNNVD	BIG-IP 跨站脚本漏洞	11 Feb 202100:00	–	cnnvd
CNVD	BIG-IP cross-site scripting vulnerability (CNVD-2021-13214)	25 Feb 202100:00	–	cnvd
CVE	CVE-2021-22979	12 Feb 202117:55	–	cve
Cvelist	CVE-2021-22979	12 Feb 202117:55	–	cvelist
EUVD	EUVD-2021-10097	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : BIG-IP FPS XSS vulnerability (K63497634)	11 Feb 202100:00	–	nessus
NCSC	Multiple vulnerabilities fixed in F5 BIG-IP products	11 Feb 202100:00	–	ncsc
NVD	CVE-2021-22979	12 Feb 202118:15	–	nvd
OSV	CVE-2021-22979	12 Feb 202118:15	–	osv

Vulners

Node

f5 big-ip_ltmRange16.0.0–16.0.1

OR

f5 big-ip_aamRange16.0.0–16.0.1

OR

f5 big-ip_advanced_wafRange16.0.0–16.0.1

OR

f5 big-ip_afmRange16.0.0–16.0.1

OR

f5 big-ip_analyticsRange16.0.0–16.0.1

OR

f5 big-ip_apmRange16.0.0–16.0.1

OR

f5 big-ip_asmRange16.0.0–16.0.1

OR

f5 big-ip_ddhdRange16.0.0–16.0.1

OR

f5 big-ip_dnsRange16.0.0–16.0.1

OR

f5 big-ip_fpsRange16.0.0–16.0.1

OR

f5 big-ip_gtmRange16.0.0–16.0.1

OR

f5 big-ip_link_controllerRange16.0.0–16.0.1

OR

f5 big-ip_pemRange16.0.0–16.0.1

OR

f5 big-ip_ssloRange16.0.0–16.0.1

OR

f5 big-ip_ltmRange15.0.0–15.1.0

OR

f5 big-ip_aamRange15.0.0–15.1.0

OR

f5 big-ip_advanced_wafRange15.0.0–15.1.0

OR

f5 big-ip_afmRange15.0.0–15.1.0

OR

f5 big-ip_analyticsRange15.0.0–15.1.0

OR

f5 big-ip_apmRange15.0.0–15.1.0

OR

f5 big-ip_asmRange15.0.0–15.1.0

OR

f5 big-ip_ddhdRange15.0.0–15.1.0

OR

f5 big-ip_dnsRange15.0.0–15.1.0

OR

f5 big-ip_fpsRange15.0.0–15.1.0

OR

f5 big-ip_gtmRange15.0.0–15.1.0

OR

f5 big-ip_link_controllerRange15.0.0–15.1.0

OR

f5 big-ip_pemRange15.0.0–15.1.0

OR

f5 big-ip_ssloRange15.0.0–15.1.0

OR

f5 big-ip_ltmRange14.1.0–14.1.2

OR

f5 big-ip_aamRange14.1.0–14.1.2

OR

f5 big-ip_advanced_wafRange14.1.0–14.1.2

OR

f5 big-ip_afmRange14.1.0–14.1.2

OR

f5 big-ip_analyticsRange14.1.0–14.1.2

OR

f5 big-ip_apmRange14.1.0–14.1.2

OR

f5 big-ip_asmRange14.1.0–14.1.2

OR

f5 big-ip_ddhdRange14.1.0–14.1.2

OR

f5 big-ip_dnsRange14.1.0–14.1.2

OR

f5 big-ip_fpsRange14.1.0–14.1.2

OR

f5 big-ip_gtmRange14.1.0–14.1.2

OR

f5 big-ip_link_controllerRange14.1.0–14.1.2

OR

f5 big-ip_pemRange14.1.0–14.1.2

OR

f5 big-ip_ssloRange14.1.0–14.1.2

OR

f5 big-ip_ltmRange13.1.0–13.1.3

OR

f5 big-ip_aamRange13.1.0–13.1.3

OR

f5 big-ip_advanced_wafRange13.1.0–13.1.3

OR

f5 big-ip_afmRange13.1.0–13.1.3

OR

f5 big-ip_analyticsRange13.1.0–13.1.3

OR

f5 big-ip_apmRange13.1.0–13.1.3

OR

f5 big-ip_asmRange13.1.0–13.1.3

OR

f5 big-ip_ddhdRange13.1.0–13.1.3

OR

f5 big-ip_dnsRange13.1.0–13.1.3

OR

f5 big-ip_fpsRange13.1.0–13.1.3

OR

f5 big-ip_gtmRange13.1.0–13.1.3

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3

OR

f5 big-ip_pemRange13.1.0–13.1.3

OR

f5 big-ip_ssloRange13.1.0–13.1.3

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_advanced_wafRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_ddhdRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_ssloRange12.1.0–12.1.5

21 Feb 2023 18:47Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.1

EPSS0.00316

big-ip xss vulnerability cve-2021-22979 remote code execution fraud protection service