Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr98-3f93-6qw6

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 57%
0.00354
Низкий

7.5 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 7.5
fstec
почти 3 года назад

Уязвимость интерфейса Traffic Management User Interface (TMUI) программных средств BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, позволяющая нарушителю проводить межсайтовые сценарные атаки

EPSS

Процентиль: 57%
0.00354
Низкий

7.5 High

CVSS3

Дефекты

CWE-79