Cross-Site Scripting in F5 WebSafe Dashboard Affects Privileged Users
CVE-2016-5236
5.4MEDIUM
Summary
The F5 WebSafe Dashboard is exposed to a Cross-Site Scripting (XSS) vulnerability that allows authenticated users with elevated privileges to inject arbitrary web scripts or HTML when creating new users, accounts, or signatures. This can lead to unauthorized actions being performed on behalf of the users who encounter the manipulated content. Users should ensure their systems are updated to mitigate potential exploitation of this vulnerability.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved