F5

Websafe Alert Server

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2016-5235

  • EPSS 0.53%
  • Published 01.07.2019 16:15:11
  • Last modified 21.11.2024 02:53:53

A Cross Site Scripting (XSS) vulnerability in versions of F5 WebSafe Dashboard 3.9.x and earlier, aka F5 WebSafe Alert Server, allows an unauthenticated user to inject HTML via a crafted alert.

5.4

CVE-2016-5236

  • EPSS 0.25%
  • Published 01.07.2019 16:15:11
  • Last modified 21.11.2024 02:53:53

Cross-Site-Scripting (XSS) vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account or signature.

8.8

CVE-2018-5545

  • EPSS 0.79%
  • Published 13.09.2018 14:29:00
  • Last modified 21.11.2024 04:09:02

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload.