VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 5, 2019· Updated Sep 17, 2024

CVE-2019-6591

CVE-2019-6591

Description

On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.

Affected products

2
  • F5, Inc./Big IPllm-fuzzy2 versions
    >=12.1.0, <=12.1.3.7 OR >=13.0.0, <=13.1.1.3 OR >=14.0.0, <=14.0.0.4+ 1 more
    • (no CPE)range: >=12.1.0, <=12.1.3.7 OR >=13.0.0, <=13.1.1.3 OR >=14.0.0, <=14.0.0.4
    • (no CPE)range: 14.0.0-14.0.0.4, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.