Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-32366 | On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| Link | Providers |
|---|---|
| https://support.f5.com/csp/article/K92807525 |
|
Wed, 23 Apr 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: f5
Published:
Updated: 2025-04-23T18:31:15.632Z
Reserved: 2022-04-19T00:00:00.000Z
Link: CVE-2022-27878
Updated: 2024-08-03T05:41:10.197Z
Status : Modified
Published: 2022-05-05T17:15:13.763
Modified: 2024-11-21T06:56:23.540
Link: CVE-2022-27878
No data.
OpenCVE Enrichment
No data.
EUVD