Lucene search

Websafe Alert Server Security Vulnerabilities

cve

CVE-2016-5235

A Cross Site Scripting (XSS) vulnerability in versions of F5 WebSafe Dashboard 3.9.x and earlier, aka F5 WebSafe Alert Server, allows an unauthenticated user to inject HTML via a crafted alert.

6.1CVSS

5.9AI Score

0.001EPSS

2019-07-01 04:15 PM

cve

CVE-2016-5236

Cross-Site-Scripting (XSS) vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account or signature.

5.4CVSS

5.3AI Score

0.001EPSS

2019-07-01 04:15 PM

cve

CVE-2018-5545

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload.

8.8CVSS

8.7AI Score

0.001EPSS

2018-09-13 02:29 PM