CVE-2016-5236

Cross-Site-Scripting (XSS) vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account or signature.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-07-01

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Websafe Alert Server (F5)

References

• https://support.f5.com/csp/article/K55922302