CVE-2016-7469

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.

Ссылки

http://www.securityfocus.com/bid/95320
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037559
http://www.securitytracker.com/id/1037560
https://support.f5.com/csp/article/K97285349
Vendor Advisory
http://www.securityfocus.com/bid/95320
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037559
http://www.securitytracker.com/id/1037560
https://support.f5.com/csp/article/K97285349
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*

Конфигурация 8

cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*

Конфигурация 9

Одно из

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*

Конфигурация 10

Одно из

cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*

Конфигурация 11

Одно из

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*

Конфигурация 12

Одно из

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*

Конфигурация 13

cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*

Конфигурация 14

Одно из

cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*

Конфигурация 15

cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*

Конфигурация 16

cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00269

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-j3wv-r8m8-mxcg

CVSS3: 5.4

github

больше 3 лет назад

EPSS

Процентиль: 50%

0.00269

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79