CVE-2014-9342: XSS
Published Dec 8, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the tree view (pltree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation.
Affected Software
1 affected component
F5 BIG-IP=11.3.0
Event History
Dec 8, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9342?
CVE-2014-9342 is classified as a medium severity vulnerability due to its potential for exploitation via XSS attacks.
2
How do I fix CVE-2014-9342?
To fix CVE-2014-9342, you should upgrade F5 BIG-IP to a version that corrects this XSS vulnerability.
3
What systems are affected by CVE-2014-9342?
CVE-2014-9342 affects F5 BIG-IP version 11.3.0.
4
What type of vulnerability is CVE-2014-9342?
CVE-2014-9342 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2014-9342 lead to data theft?
Yes, CVE-2014-9342 can potentially lead to data theft by allowing attackers to inject and execute malicious scripts.