Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-5889

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM syst

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTTP response from the untrusted backend server and sends it to the client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a BIG-IP APM

  • 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, 14.1.0-14.1.2.3affected

References