| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-36974 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows SMB Elevation of Privilege Vulnerability | ||
| CVE-2021-36973 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | ||
| CVE-2021-36972 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2021-36969 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability | ||
| CVE-2021-36968 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows DNS Elevation of Privilege Vulnerability | ||
| CVE-2021-36967 | Hig | 0.52 | 8.0 | 0.01 | Sep 15, 2021 | Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability | ||
| CVE-2021-36966 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | ||
| CVE-2021-36965 | Hig | 0.58 | 8.8 | 0.05 | Sep 15, 2021 | Windows WLAN AutoConfig Service Remote Code Execution Vulnerability | ||
| CVE-2021-36964 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-36963 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-36962 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Installer Information Disclosure Vulnerability | ||
| CVE-2021-36961 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Installer Denial of Service Vulnerability | ||
| CVE-2021-36960 | Hig | 0.49 | 7.5 | 0.03 | Sep 15, 2021 | Windows SMB Information Disclosure Vulnerability | ||
| CVE-2021-36959 | Med | 0.36 | 5.5 | 0.01 | Sep 15, 2021 | Windows Authenticode Spoofing Vulnerability | ||
| CVE-2021-36956 | Med | 0.29 | 4.4 | 0.01 | Sep 15, 2021 | Azure Sphere Information Disclosure Vulnerability | ||
| CVE-2021-36955 | Hig | 0.69 | 7.8 | 0.04 | KEV | Sep 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2021-36954 | Hig | 0.57 | 8.8 | 0.01 | Sep 15, 2021 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-36952 | Hig | 0.55 | 7.8 | 0.51 | Sep 15, 2021 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2021-26437 | Med | 0.36 | 5.5 | 0.02 | Sep 15, 2021 | Visual Studio Code Spoofing Vulnerability | ||
| CVE-2021-26435 | Hig | 0.53 | 8.1 | 0.05 | Sep 15, 2021 | Windows Scripting Engine Memory Corruption Vulnerability | ||
| CVE-2021-26434 | Hig | 0.51 | 7.8 | 0.01 | Sep 15, 2021 | Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-22149 | Hig | 0.57 | 8.8 | 0.01 | Sep 15, 2021 | Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users. | ||
| CVE-2021-22148 | Hig | 0.57 | 8.8 | 0.01 | Sep 15, 2021 | Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines. | ||
| CVE-2021-22147 | Med | 0.42 | 6.5 | 0.01 | Sep 15, 2021 | Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view. | ||
| CVE-2020-35340 | Hig | 0.49 | 7.5 | 0.01 | Sep 15, 2021 | A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read. | ||
| CVE-2021-3778 | Hig | 0.51 | 7.8 | 0.02 | Sep 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3777 | Hig | 0.42 | 7.5 | 0.01 | Sep 15, 2021 | nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity | ||
| CVE-2021-3751 | Cri | 0.64 | 9.8 | 0.01 | Sep 15, 2021 | libmobi is vulnerable to Out-of-bounds Write | ||
| CVE-2021-3706 | Hig | 0.49 | 7.5 | 0.01 | Sep 15, 2021 | adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag | ||
| CVE-2021-23029 | — | Hig | 0.57 | 8.8 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility. Note: Software… | |
| CVE-2021-23027 | — | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the… | |
| CVE-2021-23026 | Hig | 0.57 | 8.8 | 0.00 | Sep 14, 2021 | BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.… | ||
| CVE-2021-23030 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.… | ||
| CVE-2021-23028 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server,… | ||
| CVE-2021-23025 | Hig | 0.57 | 8.8 | 0.02 | Sep 14, 2021 | On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP Configuration utility. Note: Software versions which have reached End of… | ||
| CVE-2021-23036 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not… | ||
| CVE-2021-23031 | — | Cri | 0.65 | 9.9 | 0.03 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Configuration utility. Note:… | |
| CVE-2021-39391 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2021 | Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page. | ||
| CVE-2021-35493 | Cri | 0.59 | 9.0 | 0.01 | Sep 14, 2021 | The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low… | ||
| CVE-2021-23039 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote (IPSec) peer, which already has a negotiated Security Association,… | ||
| CVE-2021-23038 | — | Cri | 0.59 | 9.0 | 0.01 | Sep 14, 2021 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to… | |
| CVE-2021-23037 | — | Cri | 0.62 | 9.6 | 0.01 | Sep 14, 2021 | On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently… | |
| CVE-2021-23035 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support… | ||
| CVE-2021-23034 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have… | ||
| CVE-2021-23033 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.… | ||
| CVE-2021-23032 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel (TMM)… | ||
| CVE-2021-23045 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause the Traffic Management… | ||
| CVE-2021-41077 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | The activation process in Travis CI, for certain 2021-09-03 through 2021-09-10 builds, causes secret data to have unexpected sharing that is not specified by the customer-controlled .travis.yml file. In particular, the desired behavior (if .travis.yml has been created locally by… | ||
| CVE-2021-23044 | Hig | 0.49 | 7.5 | 0.01 | Sep 14, 2021 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology (QAT) compression driver is used on affected BIG-IP hardware and BIG-IP Virtual Edition (VE)… | ||
| CVE-2020-21082 | Med | 0.40 | 6.1 | 0.01 | Sep 14, 2021 | A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names. |
- risk 0.51cvss 7.8epss 0.01
Windows SMB Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows SMB Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows DNS Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.01
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Subsystem for Linux Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.05
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Installer Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Installer Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows SMB Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Authenticode Spoofing Vulnerability
- risk 0.29cvss 4.4epss 0.01
Azure Sphere Information Disclosure Vulnerability
- risk 0.69cvss 7.8epss 0.04
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Windows Bind Filter Driver Elevation of Privilege Vulnerability
- risk 0.55cvss 7.8epss 0.51
Visual Studio Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.02
Visual Studio Code Spoofing Vulnerability
- risk 0.53cvss 8.1epss 0.05
Windows Scripting Engine Memory Corruption Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users.
- risk 0.57cvss 8.8epss 0.01
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines.
- risk 0.42cvss 6.5epss 0.01
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
- risk 0.49cvss 7.5epss 0.01
A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.
- risk 0.51cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.42cvss 7.5epss 0.01
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity
- risk 0.64cvss 9.8epss 0.01
libmobi is vulnerable to Out-of-bounds Write
- risk 0.49cvss 7.5epss 0.01
adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
- risk 0.57cvss 8.8epss 0.01
On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility. Note: Software…
- risk 0.40cvss 6.1epss 0.01
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the…
- risk 0.57cvss 8.8epss 0.00
BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.…
- risk 0.49cvss 7.5epss 0.01
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server,…
- risk 0.57cvss 8.8epss 0.02
On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP Configuration utility. Note: Software versions which have reached End of…
- risk 0.49cvss 7.5epss 0.01
On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not…
- risk 0.65cvss 9.9epss 0.03
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Configuration utility. Note:…
- risk 0.40cvss 6.1epss 0.01
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.
- risk 0.59cvss 9.0epss 0.01
The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitable Stored and Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low…
- risk 0.49cvss 7.5epss 0.01
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote (IPSec) peer, which already has a negotiated Security Association,…
- risk 0.59cvss 9.0epss 0.01
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to…
- risk 0.62cvss 9.6epss 0.01
On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.…
- risk 0.49cvss 7.5epss 0.01
On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel (TMM)…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause the Traffic Management…
- risk 0.49cvss 7.5epss 0.01
The activation process in Travis CI, for certain 2021-09-03 through 2021-09-10 builds, causes secret data to have unexpected sharing that is not specified by the customer-controlled .travis.yml file. In particular, the desired behavior (if .travis.yml has been created locally by…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology (QAT) compression driver is used on affected BIG-IP hardware and BIG-IP Virtual Edition (VE)…
- risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names.