← CVE Intelligence

CVE-2018-15312

F5 Networks, Inc. / BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) PUBLISHED

Description (CNA)

On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an authenticated user to execute JavaScript for the currently logged-in user.

Affected (CNA)

Vendor / productVersions
F5 Networks, Inc. / BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)affected 13.0.0-13.1.1.1; affected 12.1.0-12.1.3.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.