Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-10156 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| Link | Providers |
|---|---|
| https://support.f5.com/csp/article/K61643620 |
|
No history.
Subscriptions
Status: PUBLISHED
Assigner: f5
Published:
Updated: 2024-08-03T18:58:26.362Z
Reserved: 2021-01-06T00:00:00.000Z
Link: CVE-2021-23038
No data.
Status : Modified
Published: 2021-09-14T18:15:08.370
Modified: 2026-06-17T03:38:15.497
Link: CVE-2021-23038
No data.
OpenCVE Enrichment
No data.
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EUVD