VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 5, 2019· Updated Jun 17, 2026

CVE-2019-6591

CVE-2019-6591

Description

On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.

Affected products

2
  • F5, Inc./BIG-IP APMllm-create
    Range: 14.0.0-14.0.0.4, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7
  • F5, Inc./Big IPcpe-rescue
    Range: 14.0.0-14.0.0.4, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.