CVEvulnerability

CVE-2016-7469

5.4 MEDIUM Published 2017-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.

Affected configurations

• f5 big-ip local traffic manager 11.2.1 • f5 big-ip local traffic manager 11.4.0 • f5 big-ip local traffic manager 11.4.1 • f5 big-ip local traffic manager 11.5.0 • f5 big-ip local traffic manager 11.5.1 • f5 big-ip local traffic manager 11.5.2 • f5 big-ip local traffic manager 11.5.3 • f5 big-ip local traffic manager 11.5.4 • f5 big-ip local traffic manager 11.6.0 • f5 big-ip local traffic manager 11.6.1 • f5 big-ip local traffic manager 12.0.0 • f5 big-ip local traffic manager 12.1.0 • f5 big-ip local traffic manager 12.1.1 • f5 big-ip local traffic manager 12.1.2 • f5 big-ip application acceleration manager 11.4.0 • f5 big-ip application acceleration manager 11.4.1 • f5 big-ip application acceleration manager 11.5.0 • f5 big-ip application acceleration manager 11.5.1 • f5 big-ip application acceleration manager 11.5.2 • f5 big-ip application acceleration manager 11.5.3 • f5 big-ip application acceleration manager 11.5.4 • f5 big-ip application acceleration manager 11.6.0 • f5 big-ip application acceleration manager 11.6.1 • f5 big-ip application acceleration manager 12.0.0 • f5 big-ip application acceleration manager 12.1.0 • f5 big-ip application acceleration manager 12.1.1 • f5 big-ip application acceleration manager 12.1.2 • f5 big-ip advanced firewall manager 11.2.1 • f5 big-ip advanced firewall manager 11.4.0 • f5 big-ip advanced firewall manager 11.4.1 • f5 big-ip advanced firewall manager 11.5.0 • f5 big-ip advanced firewall manager 11.5.1 • f5 big-ip advanced firewall manager 11.5.2 • f5 big-ip advanced firewall manager 11.5.3 • f5 big-ip advanced firewall manager 11.5.4 • f5 big-ip advanced firewall manager 11.6.0 • f5 big-ip advanced firewall manager 11.6.1 • f5 big-ip advanced firewall manager 12.0.0 • f5 big-ip advanced firewall manager 12.1.0 • f5 big-ip advanced firewall manager 12.1.1 • f5 big-ip advanced firewall manager 12.1.2 • f5 big-ip analytics 11.2.1 • f5 big-ip analytics 11.4.0 • f5 big-ip analytics 11.4.1 • f5 big-ip analytics 11.5.0 • f5 big-ip analytics 11.5.1 • f5 big-ip analytics 11.5.2 • f5 big-ip analytics 11.5.3 • f5 big-ip analytics 11.5.4 • f5 big-ip analytics 11.6.0 • f5 big-ip analytics 11.6.1 • f5 big-ip analytics 12.0.0 • f5 big-ip analytics 12.1.0 • f5 big-ip analytics 12.1.1 • f5 big-ip analytics 12.1.2 • f5 big-ip access policy manager 11.2.1 • f5 big-ip access policy manager 11.4.0 • f5 big-ip access policy manager 11.4.1 • f5 big-ip access policy manager 11.5.0 • f5 big-ip access policy manager 11.5.1 … and 76 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References