K44462254: Reflected Cross-Site Scripting (XSS) vulnerability CVE-2018-15312

Security Advisory Description A reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. CVE-2018-15312 Impact A remote unauthenticated attacker...

F5 Networks BIG-IP : Reflected Cross-Site Scripting (XSS) vulnerability (K44462254)

A reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. CVE-2018-15312 Impact A remote unauthenticated attacker could potentially exploit this...

CVE-2018-15312

On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an authenticated user to execute JavaScript for the currently logged-in user...

CVE-2018-15312

The CVE-2018-15312 issue affects F5 BIG-IP: reflected XSS in an undisclosed page of the BIG-IP Configuration utility. Affected versions are 13.0.0–13.1.1.1 and 12.1.0–12.1.3.6. An authenticated user can execute JavaScript in their own browser context; exploitation could be triggered by a crafted ...