5 Firepass 4100 SSL VPN v. 5.4.2 suffers from XSS in in my.support.php3. This allows an attacker to submit a crafted link to users of the vulnerable Web application in order to abuse their trust and steal their authentication credentials or hijack their sessions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44891/F5Firepass4100.txt
Source: https://packetstormsecurity.com/files/44891/F5Firepass4100.txt.html