SecuritySpace - CVE-2016-7469

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-7469

Description: A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.

Test IDs: 1.3.6.1.4.1.25623.1.0.140118

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-7469
BugTraq ID: 95320
http://www.securityfocus.com/bid/95320
http://www.securitytracker.com/id/1037559
http://www.securitytracker.com/id/1037560

CVE ID:	CVE-2016-7469
Description:	A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.
Test IDs:	1.3.6.1.4.1.25623.1.0.140118
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7469 BugTraq ID: 95320 http://www.securityfocus.com/bid/95320 http://www.securitytracker.com/id/1037559 http://www.securitytracker.com/id/1037560