Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-9257

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Admini

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to carry out a Cross Site Scripting (XSS) attack against the Administrative user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks, Inc. BIG-IP APM

  • 12.0.0 through 12.1.2affected

References