6368 matches found
F5 BIG-IP 9.4.3 - Web Management Interface Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/27720/info F5 BIG-IP is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. F5 BIG-IP 9.4.3 is vulnerable; other versions may also be affected...
F5 BIG-IP Web Management Interface Version
An F5 BIG-IP web management interface is running on this port, and Nessus has determined its software version. Note. HTTP credentials are required to retrieve version information. TRUSTED...
Cross site scripting
Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...
CVE-2008-0539
Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...
CVE-2008-0539
CVE-2008-0539 is an XSS vulnerability in F5 BIG-IP ASM (9.4.3) within the Security Report function of the Configuration utility. The issue is in dms/policy/rep_request.php and can be triggered via the report_type parameter by an authenticated user. F5’s advisory indicates affected versions (ASM 9...
CVE-2008-0539
Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...
CVE-2008-0539: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...
PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager
Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...
F5 BIG-IP应用安全管理器report_type跨站脚本漏洞
BUGTRAQ ID: 27462 BIG-IP应用安全管理器（ASM）是Web应用和运行基础架构的综合安全防护解决方案。 BIG-IP在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞执行跨站脚本执行攻击。 F5 BIG-IP ASM的Web管理界面的/dms/policy/reprequest.php页面没有正确地验证对reporttype参数的输入，如果用户受骗跟随了恶意链接的话，就可能导致在用户浏览器会话中执行跨站脚本攻击。 F5 BIG-IP Application Security Manager 9.4.3 厂商补丁： F5 --...
f5asm-xss.txt
F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...
F5 BIG-IP Web Management ASM Security Report XSS
F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...
F5 BIG-IP Application Security Manager 9.4.3 - report_type Cross-Site Scripting
F5 BIG-IP Application Security Manager 9.4.3 - reporttype Cross-Site Scripting source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied...
F5 BIG-IP Application Security Manager 9.4.3 - 'report_type' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
SOL8280 - Cross-site scripting vulnerabilities in BIG-IP Configuration utility CVE-2008-0265
The vulnerability is only available to authenticated users. Theoretically, a malicious site could use another tab in an admin user's browser to hit a list URL and cause the admin user's Configuration utility to render malicious JavaScript in the admin user's browser. The results are not saved...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...
CVE-2008-0265
Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...
CVE-2008-0265
Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...
CVE-2008-0265
F5 BIG-IP TMUI (Configuration utility) contains multiple XSS vulnerabilities (CVE-2008-0265) in the SearchString parameter across several list JSPs (list_system.jsp, list_pktfilter.jsp, list_ltm.jsp, resources_audit.jsp, list_asm.jsp, and list.jsp in various dirs). The issue affects BIG-IP LTM/GT...
F5 BIG-IP Web Management List Search XSS
F5 BIG-IP Web Management List Search XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a cross-site scripting vulnerability in the Search function present on several list-like pages. Parameter SearchString is not sanitized before it gets...