edbodmer.com Cross Site Scripting vulnerability OBB-3927277

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eitdeeptechtalent.eu Cross Site Scripting vulnerability OBB-3927276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eutek-bau.de Cross Site Scripting vulnerability OBB-3927259

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nainibrand.com Cross Site Scripting vulnerability OBB-3927207

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

idevnews.com Cross Site Scripting vulnerability OBB-3927201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

countrysidefuel.com Cross Site Scripting vulnerability OBB-3927191

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chromitemineral.com Cross Site Scripting vulnerability OBB-3927003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

asharam.com Cross Site Scripting vulnerability OBB-3926924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-28132

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-25560

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-32761

CVE-2024-32761 affects BIG-IP TMM tenants on VELOS and rSeries. The issue is a data leakage in the TMM that can randomly expose up to 64 bytes of non-contiguous randomized data; under rare conditions it may trigger a TMM restart, impacting availability. Affected versions are 15.1.0 through 15.1.9...

CVE-2024-21793

CVE-2024-21793 : An OData injection vulnerability exists in the BIG-IP Next Central Manager API. Affected: BIG-IP Next Central Manager versions 20.0.1 to 20.1.0. Impact: unauthenticated remote attackers can execute malicious SQL statements via the API, potentially bypassing authentication or exfi...

CVE-2024-31156

CVE-2024-31156 is an XSS vulnerability in the BIG-IP Configuration utility. A stored XSS flaw allows JavaScript execution in the context of the currently logged-in user via an undisclosed page. CVSSv3.1 base score 8.0 (HIGH) with Network attack vector, Low attack complexity, Privileges required: ...

CVE-2024-28132

CVE-2024-28132 affects BIG-IP Next CNF and is a Sensitive Information disclosure in the GSLB container. An authenticated attacker with administrator privileges may exploit it locally to view sensitive information. Affected versions: 1.2.0–1.2.1 . Root cause: exposure within the GSLB container; fi...

CVE-2024-28132 BIG-IP NEXT CNF vulnerability

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33604

CVE-2024-33604 affects F5 BIG-IP Configuration Utility. A reflected XSS exists in an undisclosed page, enabling JavaScript execution in the context of the logged-in user (potentially escalating to admin if via Advanced Shell). Affected versions include 17.1.0–17.1.1, 16.1.0–16.1.4, and 15.1.0–15....

CVE-2024-27202 BIG-IP TMUI XSS vulnerability

A DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33608 BIG-IP IPsec vulnerability

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

carniecapital.com Cross Site Scripting vulnerability OBB-3926845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

klopman.com Cross Site Scripting vulnerability OBB-3926793

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...