CVE-2012-2975

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-11 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.

Affected products

F5 Application Security Manager Appliance: 10.0.0, 11.2.0-hf2

References

http://www.kb.cert.org/vuls/id/143395
https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html
http://www.kb.cert.org/vuls/id/143395
https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13838.html

Get alerted when CVE-2012-2975 or the next vulnerability affects your stack