UpHeron
All vulnerabilities

Servers and applications

CVE-2014-4023

Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0…

Severity
Medium 4.3
Published
28 Oct 2014
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.8% in the next 30 daysHigher than 79% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
Cross-site scripting (CWE-79)
Attack
Over the network · No login needed
Attacker can
Change some data
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Sources
NVD

Description

Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0 through 11.4.1 and 10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

From NVD.

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 11.5.1
  • Version 11.5.0
  • Version 11.4.1
  • Version 11.4.0
All 15 release lines
  • Version 10.1.0
  • Version 10.2.0
  • Version 10.2.1
  • Version 10.2.2
  • Version 10.2.3
  • Version 10.2.4
  • Version 11.0.0
  • Version 11.1.0
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 11.5.1
  • Version 11.5.0
  • Version 11.4.1
  • Version 11.4.0
All 15 release lines
  • Version 10.1.0
  • Version 10.2.0
  • Version 10.2.1
  • Version 10.2.2
  • Version 10.2.3
  • Version 10.2.4
  • Version 11.0.0
  • Version 11.1.0
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-4023
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-4023