Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 up to and including 11.5.1, AAM 11.4.0 up to and including 11.5.1 PEM 11.3.0 up to and including 11.5.1, PSM 11.2.1 up to and including 11.4.1, WebAccelerator and WOM 11.2.1 up to and including 11.3.0, and Enterprise Manager 3.0.0 up to and including 3.1.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
f5 big-ip application acceleration manager 11.5.1 |
||
f5 big-ip advanced firewall manager 11.2.1 |
||
f5 big-ip advanced firewall manager 11.5.1 |
||
f5 big-ip analytics 11.2.1 |
||
f5 big-ip analytics 11.5.1 |
||
f5 big-ip protocol security module 11.2.1 |
||
f5 big-ip protocol security module 11.4.1 |
||
f5 big-ip webaccelerator 11.2.1 |
||
f5 big-ip webaccelerator 11.3.0 |
||
f5 big-ip local traffic manager 11.2.1 |
||
f5 big-ip application acceleration manager 11.4.0 |
||
f5 big-ip access policy manager 11.5.1 |
||
f5 big-ip application security manager 11.5.1 |
||
f5 big-ip link controller 11.2.1 |
||
f5 big-ip policy enforcement manager 11.3.0 |
||
f5 big-ip wan optimization manager 11.3.0 |
||
f5 enterprise manager 3.1.1 |
||
f5 big-ip edge gateway 11.2.1 |
||
f5 big-ip edge gateway 11.3.0 |
||
f5 big-ip global traffic manager 11.2.1 |
||
f5 big-ip global traffic manager 11.5.1 |
||
f5 big-ip local traffic manager 11.5.1 |
||
f5 big-ip access policy manager 11.2.1 |
||
f5 big-ip application security manager 11.2.1 |
||
f5 big-ip link controller 11.5.1 |
||
f5 big-ip policy enforcement manager 11.5.1 |
||
f5 big-ip wan optimization manager 11.2.1 |
||
f5 enterprise manager 3.0.0 |
Vulmon