CVE-2012-2975

Published: Sep 11, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.

Affected (2)

Products: F5: Application Security Manager Appliance

1 product

Application Security Manager Appliance

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
F5 Application Security Manager Appliance	Version 10.0.0
F5 Application Security Manager Appliance	Version 11.2.0 hf2

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

http://www.kb.cert.org/vuls/id/143395

Source: cret@cert.org

US Government Resource

https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/143395

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.