SOL48572812 - Cross Site Scripting (XSS) vulnerability in F5 WebSafe Dashboard CVE-2016-5235

Vulnerability Recommended Actions

If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in theVersions known to be not vulnerable column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.

You can contact F5 Technical Support to request a fix for WebSafe Dashboard by referencing this article number and the associated ID number.

Acknowledgements

F5 would like to acknowledge Blazej Wincenciak / Krzysztof Wegrzynek of Prevenity ([email protected]) for bringing this issue to our attention, and for following the highest standards of responsible disclosure.

Supplemental Information

• SOL9970: Subscribing to email notifications regarding F5 products
• SOL9957: Creating a custom RSS feed to view new and updated documents
• SOL4602: Overview of the F5 security vulnerability response policy
• SOL4918: Overview of the F5 critical issue hotfix policy