medium5.4
CVE-2019-6591
On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource inform…
Impact
On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | from 12.1.0 through 12.1.3 from 13.0.0 through 13.1.1.3 from 14.0.0 through 14.0.0.4 |