CVE-2018-5521
—CVSS 3.0
6.1 medium
EPSS
<1%p58
Published
()
Modified
Description
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
- Vendors
- f5
- Products
- big-ip application acceleration manager, big-ip local traffic manager, big-ip advanced firewall manager, big-ip analytics, big-ip access policy manager, big-ip application security manager, big-ip domain name system, big-ip edge gateway, big-ip global traffic manager, big-ip link controller, big-ip policy enforcement manager, big-ip webaccelerator
- Weakness
- CWE-79
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.