Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-10159 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| Link | Providers |
|---|---|
| https://support.f5.com/csp/article/K42526507 |
|
No history.
Subscriptions
Status: PUBLISHED
Assigner: f5
Published:
Updated: 2024-08-03T18:58:26.255Z
Reserved: 2021-01-06T00:00:00.000Z
Link: CVE-2021-23041
No data.
Status : Modified
Published: 2021-09-14T14:15:10.017
Modified: 2026-06-17T03:38:15.853
Link: CVE-2021-23041
No data.
OpenCVE Enrichment
No data.
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EUVD