Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.

Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.

Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. BIG-IP ASM versions 10.0.0 through 11.2.0 HF2 are vulnerable. ----------------------------------------------------------------------

The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/

----------------------------------------------------------------------

TITLE: F5 BIG-IP ASM Traffic Overview Page Cross-Site Scripting Vulnerability

SECUNIA ADVISORY ID: SA50561

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50561/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50561

RELEASE DATE: 2012-09-11

DISCUSS ADVISORY: http://secunia.com/advisories/50561/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/50561/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Repo…