K21042153: XSS vulnerability in undisclosed TMUI page CVE-2018-15313

Security Advisory Description A reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. CVE-2018-15313 Impact BIG-IP A remote unauthenticated...

CVE-2018-15313

On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page...

CVE-2018-15313

On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page...

CVE-2018-15313

The CVE-2018-15313 issue is a reflected Cross-Site Scripting vulnerability in the BIG-IP AFM TMUI page. Affected versions include BIG-IP AFM 13.0.0–13.1.1 and 12.1.0–12.1.3.6. Remediation per F5 advisory: upgrade to 13.1.1.2 (for 13.x) or 12.1.3.7 (for 12.x). Modeled products beyond these version...