CVE-2016-7469 A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,....
MediumCVSS 5.4
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip local traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.4.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.4.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.2 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.3 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.4 | No fix listed |
| f5 big-ip local traffic manager | = 11.6.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.6.1 | No fix listed |
| f5 big-ip local traffic manager | = 12.0.0 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.0 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.1 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.2 | No fix listed |
| f5 big-ip application acceleration manager | = 11.4.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.4.1 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.1 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.2 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.3 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.4 | No fix listed |
| f5 big-ip application acceleration manager | = 11.6.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.6.1 | No fix listed |
| f5 big-ip application acceleration manager | = 12.0.0 | No fix listed |
| f5 big-ip application acceleration manager | = 12.1.0 | No fix listed |
Show 114 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip application acceleration manager | = 12.1.1 | No fix listed |
| f5 big-ip application acceleration manager | = 12.1.2 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.2.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.4.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.4.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.2 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.3 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.4 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.6.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.6.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.2 | No fix listed |
| f5 big-ip analytics | = 11.2.1 | No fix listed |
| f5 big-ip analytics | = 11.4.0 | No fix listed |
| f5 big-ip analytics | = 11.4.1 | No fix listed |
| f5 big-ip analytics | = 11.5.0 | No fix listed |
| f5 big-ip analytics | = 11.5.1 | No fix listed |
| f5 big-ip analytics | = 11.5.2 | No fix listed |
| f5 big-ip analytics | = 11.5.3 | No fix listed |
| f5 big-ip analytics | = 11.5.4 | No fix listed |
| f5 big-ip analytics | = 11.6.0 | No fix listed |
| f5 big-ip analytics | = 11.6.1 | No fix listed |
| f5 big-ip analytics | = 12.0.0 | No fix listed |
| f5 big-ip analytics | = 12.1.0 | No fix listed |
| f5 big-ip analytics | = 12.1.1 | No fix listed |
| f5 big-ip analytics | = 12.1.2 | No fix listed |
| f5 big-ip access policy manager | = 11.2.1 | No fix listed |
| f5 big-ip access policy manager | = 11.4.0 | No fix listed |
| f5 big-ip access policy manager | = 11.4.1 | No fix listed |
| f5 big-ip access policy manager | = 11.5.0 | No fix listed |
| f5 big-ip access policy manager | = 11.5.1 | No fix listed |
| f5 big-ip access policy manager | = 11.5.2 | No fix listed |
| f5 big-ip access policy manager | = 11.5.3 | No fix listed |
| f5 big-ip access policy manager | = 11.5.4 | No fix listed |
| f5 big-ip access policy manager | = 11.6.0 | No fix listed |
| f5 big-ip access policy manager | = 11.6.1 | No fix listed |
| f5 big-ip access policy manager | = 12.0.0 | No fix listed |
| f5 big-ip access policy manager | = 12.1.0 | No fix listed |
| f5 big-ip access policy manager | = 12.1.1 | No fix listed |
| f5 big-ip access policy manager | = 12.1.2 | No fix listed |
| f5 big-ip application security manager | = 11.2.1 | No fix listed |
| f5 big-ip application security manager | = 11.4.0 | No fix listed |
| f5 big-ip application security manager | = 11.4.1 | No fix listed |
| f5 big-ip application security manager | = 11.5.0 | No fix listed |
| f5 big-ip application security manager | = 11.5.1 | No fix listed |
| f5 big-ip application security manager | = 11.5.2 | No fix listed |
| f5 big-ip application security manager | = 11.5.3 | No fix listed |
| f5 big-ip application security manager | = 11.5.4 | No fix listed |
| f5 big-ip application security manager | = 11.6.0 | No fix listed |
| f5 big-ip application security manager | = 11.6.1 | No fix listed |
| f5 big-ip application security manager | = 12.0.0 | No fix listed |
| f5 big-ip application security manager | = 12.1.0 | No fix listed |
| f5 big-ip application security manager | = 12.1.1 | No fix listed |
| f5 big-ip application security manager | = 12.1.2 | No fix listed |
| f5 big-ip domain name system | = 12.0.0 | No fix listed |
| f5 big-ip domain name system | = 12.1.0 | No fix listed |
| f5 big-ip domain name system | = 12.1.1 | No fix listed |
| f5 big-ip domain name system | = 12.1.2 | No fix listed |
| f5 big-ip edge gateway | = 11.2.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.4.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.4.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.2 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.3 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.4 | No fix listed |
| f5 big-ip global traffic manager | = 11.6.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.6.1 | No fix listed |
| f5 big-ip link controller | = 11.2.1 | No fix listed |
| f5 big-ip link controller | = 11.4.0 | No fix listed |
| f5 big-ip link controller | = 11.4.1 | No fix listed |
| f5 big-ip link controller | = 11.5.0 | No fix listed |
| f5 big-ip link controller | = 11.5.1 | No fix listed |
| f5 big-ip link controller | = 11.5.2 | No fix listed |
| f5 big-ip link controller | = 11.5.3 | No fix listed |
| f5 big-ip link controller | = 11.5.4 | No fix listed |
| f5 big-ip link controller | = 11.6.0 | No fix listed |
| f5 big-ip link controller | = 11.6.1 | No fix listed |
| f5 big-ip link controller | = 12.0.0 | No fix listed |
| f5 big-ip link controller | = 12.1.0 | No fix listed |
| f5 big-ip link controller | = 12.1.1 | No fix listed |
| f5 big-ip link controller | = 12.1.2 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.4.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.4.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.2 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.3 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.4 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.6.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.6.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.2 | No fix listed |
| f5 big-ip protocol security module | = 11.4.0 | No fix listed |
| f5 big-ip protocol security module | = 11.4.1 | No fix listed |
| f5 big-ip webaccelerator | = 11.2.1 | No fix listed |
| f5 big-ip websafe | = 11.6.0 | No fix listed |
| f5 big-ip websafe | = 11.6.1 | No fix listed |
| f5 big-ip websafe | = 12.0.0 | No fix listed |
| f5 big-ip websafe | = 12.1.0 | No fix listed |
| f5 big-ip websafe | = 12.1.1 | No fix listed |
| f5 big-ip websafe | = 12.1.2 | No fix listed |
| f5 big-ip wan optimization manager | = 11.2.1 | No fix listed |
| f5 enterprise manager | = 3.1.1 | No fix listed |
| f5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,WebAccelerator,WOM,WebSafe | = 12.0.0 - 12.1.2 | No fix listed |
| f5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,WebAccelerator,WOM,WebSafe | = 11.4.0 - 11.6.1 | No fix listed |
| f5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,WebAccelerator,WOM,WebSafe | = 11.2.1 | No fix listed |
References
- 95320 third-party-advisory vdb-entry
- 1037559 vdb-entry
- 1037560 vdb-entry
- support.f5.com vendor-advisory