CVE

Id
78327  
CVE No.
CVE-2015-1050  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote attackers to inject arbitrary web script or HTML via the Response Body field when creating a new user account.  
Phase
Assigned (20150115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715213 78327 CVE-2015-1050 BUGTRAQ:20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager  View
715214 78327 CVE-2015-1050 URL:http://www.securityfocus.com/archive/1/archive/1/534459/100/0/threaded  View
715215 78327 CVE-2015-1050 FULLDISC:20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager  View
715216 78327 CVE-2015-1050 URL:http://seclists.org/fulldisclosure/2015/Jan/43  View
715217 78327 CVE-2015-1050 MISC:http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html  View
715218 78327 CVE-2015-1050 SECTRACK:1031551  View
715219 78327 CVE-2015-1050 URL:http://www.securitytracker.com/id/1031551  View
715220 78327 CVE-2015-1050 XF:f5bigip-responsebody-xss(99907)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6838 JVNDB-2015-002158 複数の Apple 製品のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 Apple iOS、Apple OS X、および Apple TV のカーネルは、TCP ヘッダを適切に処理しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-1102 78327 7.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002158.html  View