Test ID:	1.3.6.1.4.1.25623.1.0.105229
Category:	F5 Local Security Checks
Title:	F5 BIG-IP - ASM cross-site scripting (XSS) vulnerability CVE-2015-1050
Summary:	F5 BIG-IP is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: F5 BIG-IP is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6.0 allows an authenticated user to inject arbitrary web script or HTML via the Response Body field. Vulnerability Impact: Remote attackers may be able to inject arbitrary web script or HTML by way of the Response Body field. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1050 Bugtraq: 20150113 [Corrected] Stored XSS Vulnerability in F5 BIG-IP Application Security Manager (Google Search) http://www.securityfocus.com/archive/1/534459/100/0/threaded http://seclists.org/fulldisclosure/2015/Jan/43 http://packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html http://www.securitytracker.com/id/1031551 XForce ISS Database: f5bigip-responsebody-xss(99907) https://exchange.xforce.ibmcloud.com/vulnerabilities/99907
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.