cbcvebase.
CVE-2018-15313
published 2018-10-19

CVE-2018-15313: On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.

medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.

Affected

5 ranges
VendorProductVersion rangeFixed in
f5big-ip_advanced_firewall_manager12.1.0 – 12.1.3.6
f5big-ip_advanced_firewall_manager13.0.0 – 13.1.1.1
f5big-ip_afm
f5_networks_incbig-ip_afm
f5_networks_incbig-ip_afm