Cross-Site Scripting in F5 WebSafe Dashboard Affects Privileged Users
CVE-2016-5236

5.4MEDIUM

Key Information:

Vendor

F5
Status
Websafe Alert Server
Vendor
CVE Published:
1 July 2019

What is CVE-2016-5236?

The F5 WebSafe Dashboard is exposed to a Cross-Site Scripting (XSS) vulnerability that allows authenticated users with elevated privileges to inject arbitrary web scripts or HTML when creating new users, accounts, or signatures. This can lead to unauthorized actions being performed on behalf of the users who encounter the manipulated content. Users should ensure their systems are updated to mitigate potential exploitation of this vulnerability.

References

https://support.f5.com/csp/article/K55922302
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.