ID de Prueba:	1.3.6.1.4.1.25623.1.0.107172
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - TMM vulnerability CVE-2016-9257
Resumen:	F5 BIG-IP APM 12.0.0 through 12.1.2 is vulnerable to Cross Site Scripting (XSS) injection due to rendering of not escaped/not encoded content of session variables in Access Reports.
Descripción:	Summary: F5 BIG-IP APM 12.0.0 through 12.1.2 is vulnerable to Cross Site Scripting (XSS) injection due to rendering of not escaped/not encoded content of session variables in Access Reports. Vulnerability Impact: A malicious non-authenticated user may be able to inject JavaScript into a request that will then be rendered and executed in the context of an administrative user when the administrative user is viewing Access Reports. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9257 http://www.securitytracker.com/id/1038416
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.