PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Nnposter

·

CVE-2008-0539

·

Published

2008-02-01

·

Updated

2023-03-03

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Application Security Manager (ASM) version 9.4.3
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php file.
Recommendations For version 9.4.3, avoid using the report type parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-0539

Affected Products

F5 Big-Ip Application Security Manager