Lucene search

K
cvelistF5CVELIST:CVE-2021-22983
HistoryFeb 12, 2021 - 5:57 p.m.

CVE-2021-22983

2021-02-1217:57:08
f5
www.cve.org
3
cross-site scripting
big-ip afm
authenticated users

EPSS

0.001

Percentile

22.7%

On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scripting attack if they attempt to access a maliciously-crafted URL. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

CNA Affected

[
  {
    "product": "BIG-IP AFM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5"
      }
    ]
  }
]

EPSS

0.001

Percentile

22.7%

Related for CVELIST:CVE-2021-22983