SecuritySpace - CVE-2016-9257

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9257

Description: In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to carry out a Cross Site Scripting (XSS) attack against the Administrative user.

Test IDs: 1.3.6.1.4.1.25623.1.0.107172

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9257
http://www.securitytracker.com/id/1038416

CVE ID:	CVE-2016-9257
Description:	In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to carry out a Cross Site Scripting (XSS) attack against the Administrative user.
Test IDs:	1.3.6.1.4.1.25623.1.0.107172
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9257 http://www.securitytracker.com/id/1038416