CVE-2014-4023

Exploit

EPSS 1.84%
Veröffentlicht 28.10.2014 14:55:05
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0 through 11.4.1 and 10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 150 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

F5 ≫ Big-ip Advanced Firewall Manager Version 11.3.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.4.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.4.1

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.3.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.1

F5 ≫ Big-ip Application Security Manager Version 10.1.0

F5 ≫ Big-ip Application Security Manager Version 10.2.0

F5 ≫ Big-ip Application Security Manager Version 10.2.1

F5 ≫ Big-ip Application Security Manager Version 10.2.2

F5 ≫ Big-ip Application Security Manager Version 10.2.3

F5 ≫ Big-ip Application Security Manager Version 10.2.4

F5 ≫ Big-ip Application Security Manager Version 11.0.0

F5 ≫ Big-ip Application Security Manager Version 11.1.0

F5 ≫ Big-ip Application Security Manager Version 11.2.0

F5 ≫ Big-ip Application Security Manager Version 11.2.1

F5 ≫ Big-ip Application Security Manager Version 11.3.0

F5 ≫ Big-ip Application Security Manager Version 11.4.0

F5 ≫ Big-ip Application Security Manager Version 11.4.1

F5 ≫ Big-ip Application Security Manager Version 11.5.0

F5 ≫ Big-ip Application Security Manager Version 11.5.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.4.0

F5 ≫ Big-ip Application Acceleration Manager Version 11.4.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.0

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.1

F5 ≫ Enterprise Manager Version 3.0.0

F5 ≫ Enterprise Manager Version 3.1.0

F5 ≫ Enterprise Manager Version 3.1.1

F5 ≫ Enterprise Manager Version 2.1.0

F5 ≫ Enterprise Manager Version 2.2.0

F5 ≫ Enterprise Manager Version 2.3.0

F5 ≫ Big-ip Edge Gateway Version 10.1.0

F5 ≫ Big-ip Edge Gateway Version 10.2.0

F5 ≫ Big-ip Edge Gateway Version 10.2.1

F5 ≫ Big-ip Edge Gateway Version 10.2.2

F5 ≫ Big-ip Edge Gateway Version 10.2.3

F5 ≫ Big-ip Edge Gateway Version 10.2.4

F5 ≫ Big-ip Edge Gateway Version 11.0.0

F5 ≫ Big-ip Edge Gateway Version 11.1.0

F5 ≫ Big-ip Edge Gateway Version 11.2.0

F5 ≫ Big-ip Edge Gateway Version 11.2.1

F5 ≫ Big-ip Edge Gateway Version 11.3.0

F5 ≫ Big-ip Global Traffic Manager Version 10.1.0

F5 ≫ Big-ip Global Traffic Manager Version 10.2.0

F5 ≫ Big-ip Global Traffic Manager Version 10.2.1

F5 ≫ Big-ip Global Traffic Manager Version 10.2.2

F5 ≫ Big-ip Global Traffic Manager Version 10.2.3

F5 ≫ Big-ip Global Traffic Manager Version 10.2.4

F5 ≫ Big-ip Global Traffic Manager Version 11.0.0

F5 ≫ Big-ip Global Traffic Manager Version 11.1.0

F5 ≫ Big-ip Global Traffic Manager Version 11.2.0

F5 ≫ Big-ip Global Traffic Manager Version 11.2.1

F5 ≫ Big-ip Global Traffic Manager Version 11.3.0

F5 ≫ Big-ip Global Traffic Manager Version 11.4.0

F5 ≫ Big-ip Global Traffic Manager Version 11.4.1

F5 ≫ Big-ip Global Traffic Manager Version 11.5.0

F5 ≫ Big-ip Global Traffic Manager Version 11.5.1

F5 ≫ Big-ip Link Controller Version 10.1.0

F5 ≫ Big-ip Link Controller Version 10.2.0

F5 ≫ Big-ip Link Controller Version 10.2.1

F5 ≫ Big-ip Link Controller Version 10.2.2

F5 ≫ Big-ip Link Controller Version 10.2.3

F5 ≫ Big-ip Link Controller Version 10.2.4

F5 ≫ Big-ip Link Controller Version 11.0.0

F5 ≫ Big-ip Link Controller Version 11.1.0

F5 ≫ Big-ip Link Controller Version 11.2.0

F5 ≫ Big-ip Link Controller Version 11.2.1

F5 ≫ Big-ip Link Controller Version 11.3.0

F5 ≫ Big-ip Link Controller Version 11.4.0

F5 ≫ Big-ip Link Controller Version 11.4.1

F5 ≫ Big-ip Link Controller Version 11.5.0

F5 ≫ Big-ip Link Controller Version 11.5.1

F5 ≫ Big-ip Local Traffic Manager Version 10.1.0

F5 ≫ Big-ip Local Traffic Manager Version 10.2.0

F5 ≫ Big-ip Local Traffic Manager Version 10.2.1

F5 ≫ Big-ip Local Traffic Manager Version 10.2.2

F5 ≫ Big-ip Local Traffic Manager Version 10.2.3

F5 ≫ Big-ip Local Traffic Manager Version 10.2.4

F5 ≫ Big-ip Local Traffic Manager Version 11.0.0

F5 ≫ Big-ip Local Traffic Manager Version 11.1.0

F5 ≫ Big-ip Local Traffic Manager Version 11.2.0

F5 ≫ Big-ip Local Traffic Manager Version 11.2.1

F5 ≫ Big-ip Local Traffic Manager Version 11.3.0

F5 ≫ Big-ip Local Traffic Manager Version 11.4.0

F5 ≫ Big-ip Local Traffic Manager Version 11.4.1

F5 ≫ Big-ip Local Traffic Manager Version 11.5.0

F5 ≫ Big-ip Local Traffic Manager Version 11.5.1

F5 ≫ Big-ip Access Policy Manager Version 10.1.0

F5 ≫ Big-ip Access Policy Manager Version 10.2.0

F5 ≫ Big-ip Access Policy Manager Version 10.2.1

F5 ≫ Big-ip Access Policy Manager Version 10.2.2

F5 ≫ Big-ip Access Policy Manager Version 10.2.3

F5 ≫ Big-ip Access Policy Manager Version 10.2.4

F5 ≫ Big-ip Access Policy Manager Version 11.0.0

F5 ≫ Big-ip Access Policy Manager Version 11.1.0

F5 ≫ Big-ip Access Policy Manager Version 11.2.0

F5 ≫ Big-ip Access Policy Manager Version 11.2.1

F5 ≫ Big-ip Access Policy Manager Version 11.3.0

F5 ≫ Big-ip Access Policy Manager Version 11.4.0

F5 ≫ Big-ip Access Policy Manager Version 11.4.1

F5 ≫ Big-ip Access Policy Manager Version 11.5.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.1

F5 ≫ Big-ip Protocol Security Module Version 10.1.0

F5 ≫ Big-ip Protocol Security Module Version 10.2.0

F5 ≫ Big-ip Protocol Security Module Version 10.2.1

F5 ≫ Big-ip Protocol Security Module Version 10.2.2

F5 ≫ Big-ip Protocol Security Module Version 10.2.3

F5 ≫ Big-ip Protocol Security Module Version 10.2.4

F5 ≫ Big-ip Protocol Security Module Version 11.0.0

F5 ≫ Big-ip Protocol Security Module Version 11.1.0

F5 ≫ Big-ip Protocol Security Module Version 11.2.0

F5 ≫ Big-ip Protocol Security Module Version 11.2.1

F5 ≫ Big-ip Protocol Security Module Version 11.3.0

F5 ≫ Big-ip Protocol Security Module Version 11.4.0

F5 ≫ Big-ip Protocol Security Module Version 11.4.1

F5 ≫ Big-ip Webaccelerator Version 10.1.0

F5 ≫ Big-ip Webaccelerator Version 10.2.0

F5 ≫ Big-ip Webaccelerator Version 10.2.1

F5 ≫ Big-ip Webaccelerator Version 10.2.2

F5 ≫ Big-ip Webaccelerator Version 10.2.3

F5 ≫ Big-ip Webaccelerator Version 10.2.4

F5 ≫ Big-ip Webaccelerator Version 11.0.0

F5 ≫ Big-ip Webaccelerator Version 11.1.0

F5 ≫ Big-ip Webaccelerator Version 11.2.0

F5 ≫ Big-ip Webaccelerator Version 11.2.1

F5 ≫ Big-ip Webaccelerator Version 11.3.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.1.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.1

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.2

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.3

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.4

F5 ≫ Big-ip Wan Optimization Manager Version 11.0.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.1.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.2.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.2.1

F5 ≫ Big-ip Wan Optimization Manager Version 11.3.0

F5 ≫ Big-ip Analytics Version 11.0.0

F5 ≫ Big-ip Analytics Version 11.1.0

F5 ≫ Big-ip Analytics Version 11.2.0

F5 ≫ Big-ip Analytics Version 11.2.1

F5 ≫ Big-ip Analytics Version 11.3.0

F5 ≫ Big-ip Analytics Version 11.4.0

F5 ≫ Big-ip Analytics Version 11.4.1

F5 ≫ Big-ip Analytics Version 11.5.0

F5 ≫ Big-ip Analytics Version 11.5.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.84%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.securitytracker.com/id/1030776

https://support.f5.com/kb/en-us/solutions/public/15000/500/sol15532.html

Vendor Advisory

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140828-F5_BIG-IP_Reflected_XSS_v10.txt

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2014-4023

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4023

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4023

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-4023