vulnerability

F5 Networks: CVE-2021-23337: K12492858: Appliance mode authenticated F5 BIG-IP Guided Configuration third-party lodash and jQuery vulnerabilities CVE-2021-23337, CVE-2020-28500, and CVE-2016-7103

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:N/I:P/A:N)	Feb 15, 2021	Jul 31, 2024	Apr 1, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Feb 15, 2021

Added

Jul 31, 2024

Modified

Apr 1, 2026

Description

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Solution

f5-big-ip-upgrade-latest

References

CVE-2016-7103
https://attackerkb.com/topics/CVE-2016-7103
CVE-2020-28500
https://attackerkb.com/topics/CVE-2020-28500
CVE-2021-23337
https://attackerkb.com/topics/CVE-2021-23337
CWE-79
EUVD-EUVD-2017-0253
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-0253
https://my.f5.com/manage/s/article/K12492858

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today