CVE-2008-0539: F5 BIG-IP Application Security Manager

Medium severity, CVSS 4.3. EPSS: 7.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter.

Affected products

• F5 BIG-IP Application Security Manager: from 9.2.0, before 9.2.5 (fixed in 9.2.5); from 9.4.0, before 9.4.4 (fixed in 9.4.4); version 9.3.0 only

Published 2008-02-01. Last modified 2026-06-16.