Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-9257
Description:In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to carry out a Cross Site Scripting (XSS) attack against the Administrative user.
Test IDs: 1.3.6.1.4.1.25623.1.0.107172  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9257
http://www.securitytracker.com/id/1038416




© 1998-2023 E-Soft Inc. All rights reserved.