CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java, BIG-IP.
CVE
CVE-2023-38423
Severity
MEDIUM
CVSS
5.4
EPSS
0.34%
Java BIG-IP
Original NVD Description
A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Related CVEs
Other vulnerabilities affecting the same vendor(s)