CVE-2020-5920

2020-08-2614:50:34

www.cve.org

cve-2020-5920

versions 11.6.1-15.1.0.5

sql injection

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack.

CNA Affected

[
  {
    "product": "BIG-IP AFM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1"
      }
    ]
  }
]

References

support.f5.com/csp/article/K25160703