CVE-2012-2975: XSS
Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2975?
CVE-2012-2975 has a medium severity rating, which indicates a notable risk to affected systems.
How do I fix CVE-2012-2975?
To fix CVE-2012-2975, it is recommended to update the F5 Application Security Manager Appliance to the latest patched version.
What software versions are affected by CVE-2012-2975?
CVE-2012-2975 affects F5 Application Security Manager Appliance versions 10.0.0 through 11.2.0 HF2.
What type of attack does CVE-2012-2975 enable?
CVE-2012-2975 enables attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
Where does CVE-2012-2975 manifest in the application?
CVE-2012-2975 manifests on the traffic overview page of the F5 ASM appliance.