Программа: BIG-IP 9.x
Уязвимость позволяет удаленному пользователю выполнить XSS нападение на целевую систему. Уязвимость существует из-за недостаточной обработки входных данных в параметре SearchString" следующими сценариями:
/tmui/Control/jspmap/tmui/locallb/virtual_server/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/http/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/ftp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/rtsp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/sip/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/persistence/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/fastl4/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/fasthttp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/httpclass/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/tcp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/udp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/sctp/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/clientssl/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/serverssl/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/authn/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/connpool/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/statistics/list.jsp
/tmui/Control/jspmap/tmui/locallb/profile/stream/list.jsp
/tmui/Control/jspmap/tmui/locallb/pool/list.jsp
/tmui/Control/jspmap/tmui/locallb/node/list.jsp
/tmui/Control/jspmap/tmui/locallb/monitor/list.jsp
/tmui/Control/jspmap/tmui/locallb/ssl_certificate/list.jsp
/tmui/Control/jspmap/tmui/system/user/list.jsp
/tmui/Control/jspmap/tmui/system/log/list_system.jsp
/tmui/Control/jspmap/tmui/system/log/list_pktfilter.jsp
/tmui/Control/jspmap/tmui/system/log/list_ltm.jsp
/tmui/Control/jspmap/tmui/system/log/resources_audit.jsp
/tmui/Control/jspmap/tmui/system/log/list_asm.jsp
Атакующий может выполнить произвольный сценарий в браузере жертвы в контексте безопасности уязвимого сайта.
