Lucene search
+L

6515 matches found

F5 Networks
F5 Networks
•added 2023/02/21 7:49 p.m.•40 views

K15549: Rsync vulnerability CVE-2007-6199

Security Advisory Description rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. CVE-2007-6199 Impact An...

9.3CVSS9AI score0.04136EPSS
SaveExploits0Affected Software17
F5 Networks
F5 Networks
•added 2023/02/21 7:48 p.m.•40 views

K14740: OpenSSH vulnerability CVE-2011-5000

Security Advisory Description The sshgssapiparseename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service memory consumption via a large value in a certain length field. NOTE: there may b...

3.5CVSS6.8AI score0.02595EPSS
SaveExploits1Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:47 p.m.•40 views

K17386: vCMP DoS vulnerability CVE-2015-6546

Security Advisory Description An attacker sourcing malicious traffic from a network adjacent to the BIG-IP system may be able to cause a denial-of-service DoS condition on a vCMP host and the vCMP guests running on it. The vulnerability cannot be exploited outside of the local network segment or ...

6.1CVSS6.3AI score0.00721EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 7:47 p.m.•40 views

K16505: NTP vulnerability CVE-2015-1798

Security Advisory Description The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC...

1.8CVSS6.3AI score0.02219EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:42 p.m.•40 views

K3568: DNS denial of service vulnerability - CAN-2004-0789

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

5CVSS6.5AI score0.02765EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:40 p.m.•40 views

K15441: PHP vulnerability CVE-2011-1148

Security Advisory Description Use-after-free vulnerability in the substrreplace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service memory corruption or possibly have unspecified other impact by using the same variable for multiple arguments...

7.5CVSS7.2AI score0.04736EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 7:39 p.m.•40 views

K74759095: SafeNet External Network HSM script vulnerability CVE-2017-6165

Security Advisory Description In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM...

9.8CVSS9.4AI score0.01925EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 7:37 p.m.•40 views

K24036027: libarchive vulnerability CVE-2016-5844

Security Advisory Description Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file. CVE-2016-5844 Impact For BIG-IP and VIPRION platforms that are configured to use Virtual Clustered...

6.5CVSS7AI score0.04131EPSS
SaveExploits1Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 7:33 p.m.•40 views

K09408132: glibc vulnerability CVE-2011-1659

Security Advisory Description Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a...

5CVSS5AI score0.02856EPSS
SaveExploits1Affected Software10
F5 Networks
F5 Networks
•added 2023/02/21 7:30 p.m.•40 views

K24202220: OpenJDK vulnerability CVE-2019-2894

Security Advisory Description Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker wi...

4.3CVSS4.8AI score0.03159EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:29 p.m.•40 views

K15785: Kerberos vulnerability CVE-2013-6800

Security Advisory Description An unspecified third-party database module for the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.10.x allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via a crafted request, a different vulnerability...

4CVSS6.8AI score0.02608EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:29 p.m.•40 views

K15784: Kerberos vulnerability CVE-2013-1418

Security Advisory Description The setupserverrealm function in main.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted...

4.3CVSS6.8AI score0.05508EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:27 p.m.•40 views

K15885: GNU C Library vulnerability CVE-2011-1071

Security Advisory Description The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension...

5.1CVSS5.8AI score0.14323EPSS
SaveExploits2Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 7:4 p.m.•40 views

K08421805: GStreamer vulnerability CVE-2016-9635

Security Advisory Description Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash by providing a skip count that goes...

9.8CVSS9.3AI score0.09267EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 7:2 p.m.•40 views

K68942513: Java vulnerability CVE-2013-5780

Security Advisory Description Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via...

4.3CVSS6.9AI score0.03433EPSS
SaveExploits0Affected Software5
F5 Networks
F5 Networks
•added 2023/02/21 7:0 p.m.•40 views

K54431371: BIG-IP APM client for Linux and macOS vulnerability CVE-2018-5546

Security Advisory Description The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. CVE-2018-5546 Impact A...

7.8CVSS7.4AI score0.00453EPSS
SaveExploits1Affected Software2
F5 Networks
F5 Networks
•added 2023/02/21 7:0 p.m.•40 views

K47605350: MySQL vulnerability CVE-2016-5631

Security Advisory Description Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached. CVE-2016-5631 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory...

4.9CVSS5.5AI score0.02471EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:0 p.m.•40 views

K66782293: TMM vulnerability CVE-2021-23039

Security Advisory Description When IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote IPSec peer, which already has a negotiated Security Association, can cause the Traffic Management Microkernel TMM to terminate. CVE-2021-23039 Impact Traffic is disrupted whil...

7.5CVSS7.4AI score0.0095EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 7:0 p.m.•40 views

K44453423: IP-in-IP Packet Processing vulnerability CVE-2020-10136

Security Advisory Description Multiple products that implement the IP Encapsulation within IP standard RFC 2003, STD 1 decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface an...

5.3CVSS5.7AI score0.28537EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:59 p.m.•40 views

K06015902: Intel AMT vulnerabilities CVE-2020-0531, CVE-2020-0532, and CVE-2020-0535

Security Advisory Description CVE-2020-0531 Improper input validation in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access. CVE-2020-0532 Improper input validation in subsystem for...

7.1CVSS5.9AI score0.01646EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:59 p.m.•40 views

K16356: BIND vulnerability CVE-2015-1349

Security Advisory Description named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering a...

5.4CVSS7.8AI score0.22168EPSS
SaveExploits0Affected Software18
F5 Networks
F5 Networks
•added 2023/02/21 6:58 p.m.•40 views

K17551: Linux kernel vulnerability CVE-2014-9419

Security Advisory Description The switchto function in arch/x86/kernel/process64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage TLS descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection...

2.1CVSS6.2AI score0.00436EPSS
SaveExploits0Affected Software21
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•40 views

K25434422: NGINX Controller vulnerability CVE-2020-5899

Security Advisory Description Recovery code required to change a user's password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address of...

7.8CVSS7.8AI score0.00185EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•40 views

K73835689: Samba vulnerability CVE-2017-12150

Security Advisory Description It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

7.4CVSS6.6AI score0.13334EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•40 views

K37428370: Intel Xeon access control vulnerability CVE-2019-0126

Security Advisory Description Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access. CVE-2019-0126 Impact Th...

7.2CVSS6.7AI score0.00401EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K20722197: Samba vulnerability CVE-2017-2619

Security Advisory Description Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition. CVE-2017-2619 Impact There is no impact; F5 products are not affected b...

7.5CVSS6.7AI score0.11181EPSS
SaveExploits4
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K57201259: Intel SGX vulnerabilities CVE-2019-14565, CVE-2019-14566

Security Advisory Description CVE-2019-14565 Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via...

7.8CVSS7.4AI score0.00355EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K51539421: BIG-IP SIP ALG profile vulnerability CVE-2022-26370

Security Advisory Description When a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2022-26370 Impact...

7.5CVSS7.5AI score0.00787EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K62695363: OpenSSL vulnerability CVE-2018-0733

Security Advisory Description Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than th...

5.9CVSS6.3AI score0.08436EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K29215970: Linux kernel vulnerability CVE-2019-10125

Security Advisory Description An issue was discovered in aiopoll in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aiopollwake if an expected event is triggered immediately e.g., by the close of a pair of pipes after the return of vfspoll, and this will cause a...

10CVSS6.3AI score0.05258EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K16101409: BIG-IP AFM vulnerability CVE-2022-23028

Security Advisory Description When global AFM SYN cookie protection TCP Half Open flood vector is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fail. CVE-2022-23028 Impact This vulnerability allows a remote attacker to cause a denial-of-service DoS on the...

5.3CVSS5.4AI score0.00889EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K24301698: TMUI XSS vulnerability CVE-2021-23027

Security Advisory Description A DOM based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. CVE-2021-23027 Impact An attacker may exploit this...

6.1CVSS6AI score0.00581EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K88628547: glibc vulnerability CVE-2019-6488

Security Advisory Description The string component in the GNU C Library aka glibc or libc6 through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for sizet in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as...

7.8CVSS7.9AI score0.00436EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•40 views

K55518036: GO vulnerability CVE-2021-31525

Security Advisory Description net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service panic via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations. CVE-2021-31525 Impact There...

5.9CVSS7.4AI score0.03692EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•40 views

K98201023: PostgreSQL vulnerability CVE-2018-16850

Security Advisory Description postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pgupgrade and pgdump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges...

9.8CVSS8.4AI score0.0515EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•40 views

K72403108: tcpdump vulnerabilities CVE-2016-7926, CVE-2016-7932, and CVE-2016-7938

Security Advisory Description CVE-2016-7926 The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertypeprint. CVE-2016-7932 The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum. CVE-2016-7938 The ZeroMQ parser in tcpdump...

9.8CVSS8.6AI score0.03198EPSS
SaveExploits0Affected Software21
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•40 views

K00498403: Libgcrypt vulnerability CVE-2021-3345

Security Advisory Description gcrymdblockwrite in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later. CVE-2021-3345 Impact There is no impact; F5 products are not...

7.8CVSS7.9AI score0.01064EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•40 views

K43084130: BIND vulnerability CVE-2018-5735

Security Advisory Description The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other...

7.5CVSS7AI score0.01386EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:52 p.m.•40 views

K19012930: TMM GTP vulnerability CVE-2021-23048

Security Advisory Description When GPRS Tunneling Protocol GTP iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the Traffic Management Microkernel TMM to terminate. CVE-2021-23048. Impact Traffic is disrupted while the TMM process restarts. Th...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:49 p.m.•40 views

K04246541: MySQL vulnerabilities CVE-2019-2689, CVE-2019-2691, CVE-2019-2693, CVE-2019-2694, and CVE-2019-2695

Security Advisory Description CVE-2019-2689 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

6.5CVSS5.4AI score0.02099EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•40 views

K84884003: rsyslog vulnerability CVE-2019-17040

Security Advisory Description contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled. CVE-2019-17040 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has...

9.8CVSS8.5AI score0.02415EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•40 views

K61186963: cURL vulnerability CVE-2020-8285

Security Advisory Description curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. CVE-2020-8285 Impact A malicious FTP server can trigger a stack overflow and cause a denial-of-service DoS on the F5 product that ...

7.5CVSS6.8AI score0.09917EPSS
SaveExploits1Affected Software18
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•40 views

K01587042: BIG-IP SPDY and HTTP/2 profile vulnerability CVE-2016-7475

Security Advisory Description Under some circumstances, the Traffic Management Microkernel TMM may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles. CVE-2016-7475 Impact In many cases, the pool members will tear down these network connections...

7.5CVSS7.4AI score0.01321EPSS
SaveExploits0Affected Software8
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•40 views

K94563344: HTTP/2 ALPN vulnerability CVE-2019-6619

Security Advisory Description The Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero. CVE-2019-6619 Impact BIG-IP The Traffic Management...

7.5CVSS7.4AI score0.01766EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•40 views

K86569155: Apache Gobblin vulnerability CVE-2021-36152

Security Advisory Description Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue. CVE-2021-36152 Impact There is no impact; F5 products are not affected by this...

9.8CVSS9.1AI score0.01302EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•40 views

K65065347: Apache Struts vulnerability CVE-2018-1327

Security Advisory Description The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML handler as...

7.5CVSS7.8AI score0.08738EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•40 views

K14969: BIG-IP Edge and FirePass client information leakage vulnerability CVE-2013-6024

Security Advisory Description The Edge Client components in F5 BIG-IP APM, BIG-IP Edge Gateway, and FirePass allow attackers to obtain sensitive information from process memory via unspecified vectors. CVE-2013-6024 Impact An attacker with sufficient local privileges on a client machine running...

4.4CVSS6.6AI score0.00357EPSS
SaveExploits0Affected Software3
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•40 views

K35209601: BIG-IP snmpd vulnerability CVE-2019-6606

Security Advisory Description When processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory. CVE-2019-6606 Impact When a remote attacker exploits this vulnerability, the BIG-IP system may consume excessive amounts of memory, which can result in ...

4.3CVSS4.9AI score0.01279EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:45 p.m.•40 views

K32450233: Linux kernel vulnerability CVE-2018-20854

Security Advisory Description An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl-phys out-of-bounds read. CVE-2018-20854 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

7.8CVSS7.6AI score0.00391EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:35 p.m.•40 views

K97285349: XSS vulnerability in the BIG-IP and Enterprise Manager Configuration utilities CVE-2016-7469

Security Advisory Description A stored cross-site scripting XSS vulnerability in the BIG-IP Configuration utility device name change page allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cau...

5.4CVSS5.2AI score0.00947EPSS
SaveExploits0Affected Software16
Total number of security vulnerabilities5000