QwikSec

Security Database

CVE

CWE

Training

CVE-2014-9342

Published: Dec 8, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20141202 F5 BIGIP - (OLD!) Persistent XSS in ASM Module

mailing-list

x_refsource_BUGTRAQ

https://support.f5.com/kb/en-us/solutions/public/15000/900/sol15939.html

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

https://support.f5.com/csp/article/K15939

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.