Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP FPS
Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4
Fixed In:
11.6.0 HF4
Opened: Nov 23, 2014 Severity: 3-Major
FPS JavaScript was injected into HTTP responses regardless their status code.
WebSafe components are easily identified.
Error response (status code 404).
None
FPS JavaScript is now injected only into responses with 2xx status codes.