CVE-2008-1503
F5 BIG-IP 9.4.3 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities.
References (4)
Scores
EPSS
0.0035
EPSS Percentile
57.1%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
f5/tmos
Timeline
Published
Mar 25, 2008
Tracked Since
Feb 18, 2026