CVE-2008-0539

Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter.

• CWE-79

• http://secunia.com/advisories/28655Broken Link
• http://securityreason.com/securityalert/3602Broken Link
• http://www.securityfocus.com/archive/1/487118/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/489290/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27462Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28151Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1019276Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0301Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39979VDB Entry
• http://secunia.com/advisories/28655Broken Link
• http://securityreason.com/securityalert/3602Broken Link
• http://www.securityfocus.com/archive/1/487118/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/489290/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/27462Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/28151Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1019276Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/0301Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39979VDB Entry

Published

Feb 1, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0533Multiple cross-site scripting (XSS) vulnerabilities in secur…
• CVE-2008-0534The SSH server in (1) Cisco Service Control Engine (SCE) bef…
• CVE-2008-0535Unspecified vulnerability in the SSH server in (1) Cisco Ser…
• CVE-2008-0536Unspecified vulnerability in the SSH server in (1) Cisco Ser…
• CVE-2008-0537Unspecified vulnerability in the Supervisor Engine 32 (Sup32…
• CVE-2008-0538Multiple SQL injection vulnerabilities in phpIP Management 4…
• CVE-2008-0540Multiple cross-site scripting (XSS) vulnerabilities in trixb…
• CVE-2008-0541Multiple cross-site scripting (XSS) vulnerabilities in forum…
• CVE-2008-0542Directory traversal vulnerability in thumbnail.php in Gerd T…
• CVE-2008-0543Multiple SQL injection vulnerabilities in Pre Dynamic Instit…
• CVE-2008-0544Heap-based buffer overflow in the IMG_LoadLBM_RW function in…
• CVE-2008-0545Multiple directory traversal vulnerabilities in Bubbling Lib…