Описание
On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 15.1.0 (включая) до 15.1.1 (исключая)
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00254
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened.
EPSS
Процентиль: 48%
0.00254
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79