{"id":"CVE-2016-7469","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-7469","generatedAt":"2026-10-28T21:56:12.579Z","title":"A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 -…","description":"A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.","published":"2017-06-09T15:29:00.000Z","lastModified":"2026-06-17T00:53:07.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.0","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip domain name system","f5/big-ip edge gateway","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip protocol security module","f5/big-ip webaccelerator","f5/big-ip websafe","f5/big-ip wan optimization manager","f5/enterprise manager"],"epss":{"score":0.00947,"percentile":0.60965,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.95%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/95320","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1037559","source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1037560","source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K97285349","tags":["Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"http://www.securityfocus.com/bid/95320","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K97285349","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-7469","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}