← CVE Intelligence

CVE-2018-5521

F5 Networks, Inc. / BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) PUBLISHED

Description (CNA)

On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.

Affected (CNA)

Vendor / productVersions
F5 Networks, Inc. / BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)affected 12.1.0-12.1.3.1; affected 11.6.1-11.6.3.1; affected 11.5.1-11.5.5; affected 11.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.