CVE-2014-4023

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 10.1.0 through 10.2.4 F5 BIG-IP LTM versions 11.0.0 through 11.5.x F5 BIG-IP APM versions 10.1.0 through 10.2.4 F5 BIG-IP APM versions 11.0.0 through 11.5.x F5 BIG-IP ASM versions 10.1.0 through 10.2.4 F5 BIG-IP ASM versions 11.0.0 through 11.5.x F5 BIG-IP GTM versions 10.1.0 through 10.2.4 F5 BIG-IP GTM versions 11.0.0 through 11.5.x F5 BIG-IP Link Controller versions 10.1.0 through 10.2.4 F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x F5 BIG-IP AAM versions 11.0.0 through 11.5.x F5 BIG-IP AFM versions 11.0.0 through 11.5.x F5 BIG-IP PEM versions 11.0.0 through 11.5.x F5 BIG-IP Analytics versions 11.0.0 through 11.5.1 F5 BIG-IP Edge Gateway versions 10.1.0 through 10.2.4 F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0 F5 BIG-IP WebAccelerator versions 10.1.0 through 10.2.4 F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0 F5 BIG-IP WOM versions 10.1.0 through 10.2.4 F5 BIG-IP WOM versions 11.0.0 through 11.3.0 F5 BIG-IP PSM versions 10.1.0 through 10.2.4 F5 BIG-IP PSM versions 11.0.0 through 11.4.1 F5 Enterprise Manager versions 2.1.0 through 2.3.0 F5 Enterprise Manager versions 3.0.0 through 3.1.1

Description A cross-site scripting (XSS) issue exists in the Configuration utility, specifically in tmui/dashboard/echo.jsp, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For F5 BIG-IP LTM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP APM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP ASM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP GTM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP Link Controller versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP AAM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP AFM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP PEM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP Analytics versions 11.0.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP Edge Gateway versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP WebAccelerator versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP WOM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP PSM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.4.1, update to a version outside of the affected range. For F5 Enterprise Manager versions 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, update to a version outside of the affected range.