| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| big-ip access policy manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip advanced firewall manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip advanced web application firewall | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip analytics | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip application acceleration manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip application security manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip ddos hybrid defender | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip domain name system | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip fraud protection service | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip global traffic manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip link controller | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip local traffic manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip policy enforcement manager | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
| big-ip ssl orchestrator | ≥ 12.1.0, ≤ 12.1.5≥ 13.1.0, < 13.1.3.5≥ 14.1.0, < 14.1.2.8≥ 15.1.0, < 15.1.1≥ 16.0.0, < 16.0.1 | 13.1.3.514.1.2.815.1.116.0.1 |
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility when Fraud Protection Service is provisioned and allows an attacker to execute JavaScript in the context of the current logged-in user. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí