CVE-2019-6626

Summary

On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the Configuration utility.

Affected Software

VendorProductVersion RangeStatus
F5BIG-IP (AFM, Analytics, ASM)BIG-IP (AFMaffected
F5BIG-IP (AFM, Analytics, ASM)Analyticsaffected
F5BIG-IP (AFM, Analytics, ASM)ASM) 14.1.0-14.1.0.5affected
F5BIG-IP (AFM, Analytics, ASM)14.0.0-14.0.0.4affected
F5BIG-IP (AFM, Analytics, ASM)13.0.0-13.1.1.4affected
F5BIG-IP (AFM, Analytics, ASM)12.1.0-12.1.4affected
F5BIG-IP (AFM, Analytics, ASM)11.5.1-11.6.3.4affected

Weaknesses

  • XSS

ADP Enrichment

CVE Program Container

Additional References

References