ID de Prueba:	1.3.6.1.4.1.25623.1.0.105229
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - ASM cross-site scripting (XSS) vulnerability CVE-2015-1050
Resumen:	F5 BIG-IP is prone to a cross-site scripting (XSS) vulnerability.
Descripción:	Summary: F5 BIG-IP is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6.0 allows an authenticated user to inject arbitrary web script or HTML via the Response Body field. Vulnerability Impact: Remote attackers may be able to inject arbitrary web script or HTML by way of the Response Body field. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1050 Bugtraq: 20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager (Google Search) http://www.securityfocus.com/archive/1/534459/100/0/threaded http://seclists.org/fulldisclosure/2015/Jan/43 http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html http://www.securitytracker.com/id/1031551 XForce ISS Database: f5bigip-responsebody-xss(99907) https://exchange.xforce.ibmcloud.com/vulnerabilities/99907
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.