K63712424: PHP vulnerability CVE-2015-8935

🗓️ 21 Feb 2023 18:35:05Reported by f5Type

f5🔗 my.f5.com👁 49 Views

PHP vulnerability CVE-2015-8935 allows remote attackers to conduct cross-site scripting attack

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PHP affect IBM Flex System Chassis Management Module	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple php vulnerabilities	18 Jun 201801:33	–	ibm
Tenable Nessus	PHP < 5.4.38, < 5.5.22, < 5.6.6 HTTP Header Content Injection XSS	12 Jul 201600:00	–	nessus
Tenable Nessus	PHP 5.5.x < 5.5.37 / 5.6.x < 5.6.23 / 7.0.x < 7.0.8 Multiple Vulnerabilities	13 Jul 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : php (EulerOS-SA-2019-2221)	8 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : php (EulerOS-SA-2019-2438)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : php (EulerOS-SA-2019-2649)	18 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2020-1747)	1 Jul 202000:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : PHP vulnerability (SOL63712424)	19 Oct 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : shotwell (openSUSE-2016-844)	23 Mar 201600:00	–	nessus

Vulners

Node

f5 big-ip_ltmMatch11.6.0

OR

f5 big-ip_ltmRange11.4.0–11.5.3

OR

f5 big-ip_ltmMatch11.2.1

OR

f5 big-ip_ltmRange10.2.1–10.2.4

OR

f5 big-ip_aamMatch11.6.0

OR

f5 big-ip_aamRange11.4.0–11.5.3

OR

f5 big-ip_afmMatch11.6.0

OR

f5 big-ip_afmRange11.4.0–11.5.3

OR

f5 big-ip_analyticsMatch11.6.0

OR

f5 big-ip_analyticsRange11.4.0–11.5.3

OR

f5 big-ip_analyticsMatch11.2.1

OR

f5 big-ip_apmMatch11.6.0

OR

f5 big-ip_apmRange11.4.0–11.5.3

OR

f5 big-ip_apmMatch11.2.1

OR

f5 big-ip_apmRange10.2.1–10.2.4

OR

f5 big-ip_asmMatch11.6.0

OR

f5 big-ip_asmRange11.4.0–11.5.3

OR

f5 big-ip_asmMatch11.2.1

OR

f5 big-ip_asmRange10.2.1–10.2.4

OR

f5 big-ip_edge_gatewayMatch11.2.1

OR

f5 big-ip_edge_gatewayRange10.2.1–10.2.4

OR

f5 big-ip_gtmMatch11.6.0

OR

f5 big-ip_gtmRange11.4.0–11.5.3

OR

f5 big-ip_gtmMatch11.2.1

OR

f5 big-ip_gtmRange10.2.1–10.2.4

OR

f5 big-ip_link_controllerMatch11.6.0

OR

f5 big-ip_link_controllerRange11.4.0–11.5.3

OR

f5 big-ip_link_controllerMatch11.2.1

OR

f5 big-ip_link_controllerRange10.2.1–10.2.4

OR

f5 big-ip_pemMatch11.6.0

OR

f5 big-ip_pemRange11.4.0–11.5.3

OR

f5 big-ip_psmRange11.4.0–11.4.1

OR

f5 big-ip_psmRange10.2.1–10.2.4

OR

f5 big-ip_webacceleratorMatch11.2.1

OR

f5 big-ip_webacceleratorRange10.2.1–10.2.4

OR

f5 big-ip_womMatch11.2.1

OR

f5 big-ip_womRange10.2.1–10.2.4

OR

f5 big-ip_websafeMatch11.6.0

OR

f5 enterprise_managerMatch3.1.1

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_centralized_managementRange5.0.0–5.1.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

OR

f5 iworkflowRange2.0.0–2.0.1

21 Feb 2023 18:35Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24.3

CVSS 36.1

EPSS0.02946

php vulnerability cve-2015-8935 cross-site scripting