Lucene search
CertccCVE-2012-2975HistorySep 11, 2012 - 6:55 p.m.
CVE-2012-2975
2012-09-1118:55:01
CWE-79
certcc
web.nvd.nist.gov
30
cve-2012-2975
cross-site scripting
xss
f5
asm
appliance
security vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
52.2%
Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.
Affected configurations
Node
f5application_security_manager_applianceMatch10.0.0
ORf5application_security_manager_applianceMatch11.2.0hf2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f5 | application_security_manager_appliance | 10.0.0 | cpe:2.3:h:f5:application_security_manager_appliance:10.0.0:*:*:*:*:*:*:* |
| f5 | application_security_manager_appliance | 11.2.0 | cpe:2.3:h:f5:application_security_manager_appliance:11.2.0:hf2:*:*:*:*:*:* |
Related
cert
cert
F5 Networks ASM appliance contains a cross-site scripting vulnerability
2012-09-10 00:00:00
f5
f5
XSS vulnerability CVE-2012-2975
2012-09-06 23:46:00
SOL13838 - XSS vulnerability CVE-2012-2975
2012-09-06 00:00:00
prion
prion
Cross site scripting
2012-09-11 18:55:00
cvelist
cvelist
CVE-2012-2975
2012-09-11 18:00:00
nessus
nessus
F5 Networks BIG-IP : XSS vulnerability (SOL13838)
2014-10-10 00:00:00
seebug
seebug
F5 BIG-IP ASM Traffic Overview页面跨站脚本执行漏洞
2012-09-12 00:00:00
nvd
nvd
CVE-2012-2975
2012-09-11 18:55:01
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
52.2%
Related for CVE-2012-2975