Description
Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
- F5 / firepass_4100
- F5 / firepass_ssl_vpn5.4.2 – 5.4.2
- F5 / firepass_ssl_vpn5.5.2 – 5.5.2
- F5 / firepass_ssl_vpn6.0 – 6.0
- F5 / firepass_ssl_vpn6.2 – 6.2